Loading npm security reports…

@swirls/cli@0.1.124: Suspicious npm security report (Warn) | LPM Firewall

registry / @swirls/cli / 0.1.124

@swirls/cli@0.1.124

Swirls command line application

AI Security Review

scanned 9d ago · by lpm-firewall-ai

Global npm/Bun installation runs a remote shell script without a pinned artifact or integrity check. Its resulting binary is copied over the package bin entrypoint.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm or Bun global installation with lifecycle scripts enabled

Impact

The remote endpoint can execute arbitrary shell commands and supply the CLI binary at install time.

Mechanism

postinstall curl-pipe-bash remote binary bootstrap

Rationale

The package has a real install-time remote-code-execution surface, but inspected local files do not establish a concrete malicious payload, theft, persistence, or agent-control mutation. Treat the unpinned lifecycle bootstrap as unresolved supply-chain risk.

Evidence

package.jsonscripts/install.jsbin/swirlsREADME.mdbin/README.txt

Network endpoints1

swirls.ai/install

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

Critical

Download Execute

Source downloads or fetches remote code and executes it.

scripts/install.jsView on unpkg · L13

13Trigger-reachable chain: scripts.postinstall -> scripts/install.js L13: L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

scripts/install.jsView on unpkg · L13

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs'

High

Child Process

Package source references child process execution.

scripts/install.jsView on unpkg · L13

49stdio: 'inherit', L50: shell: true, L51: })

High

Shell

Package source references shell execution.

scripts/install.jsView on unpkg · L49

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/install.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @swirls/cli@0.1.118 matchedPath = scripts/install.js matchedIdentity = npm:QHN3aXJscy9jbGk:0.1.118 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install.jsView on unpkg