Loading npm security reports…

@swirls/cli@0.1.122: Suspicious npm security report (Warn) | LPM Firewall

registry / @swirls/cli / 0.1.122

@swirls/cli@0.1.122

Swirls command line application

AI Security Review

scanned 10d ago · by lpm-firewall-ai

A global npm install executes a remote shell script from swirls.ai through curl and bash. The resulting binary is copied into the package bin directory.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm or Bun global installation with lifecycle scripts enabled on non-Windows, non-CI hosts

Impact

Remote endpoint content can run with the installing user's privileges and supply the installed CLI binary.

Mechanism

postinstall remote shell-script download and execution

Rationale

Source confirms an install-time remote code execution primitive, but no package-contained evidence establishes credential theft, destructive action, persistence, or a malicious payload. Treat it as a high-risk remote bootstrap requiring a warning rather than a confirmed malicious package.

Evidence

package.jsonscripts/install.jsbin/swirlsbin/README.txtREADME.md~/.local/bin/swirls

Network endpoints1

swirls.ai/install

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with false-positive risk.

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

Critical

Download Execute

Source downloads or fetches remote code and executes it.

scripts/install.jsView on unpkg · L13

13Trigger-reachable chain: scripts.postinstall -> scripts/install.js L13: L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

scripts/install.jsView on unpkg · L13

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs'

High

Child Process

Package source references child process execution.

scripts/install.jsView on unpkg · L13

49stdio: 'inherit', L50: shell: true, L51: })

High

Shell

Package source references shell execution.

scripts/install.jsView on unpkg · L49

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/install.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @swirls/cli@0.1.118 matchedPath = scripts/install.js matchedIdentity = npm:QHN3aXJscy9jbGk:0.1.118 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install.jsView on unpkg