registry / @swirls/cli / 0.1.128

@swirls/cli@0.1.128

Swirls command line application

AI Security Review

scanned 1d ago · by lpm-firewall-ai

A global npm/Bun install automatically fetches an unversioned remote shell script and executes it. Its output can replace the CLI executable.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Global installation of @swirls/cli on a non-Windows, non-CI host.

Impact

Remote server-controlled code executes with the installing user's permissions and installs a resulting binary.

Mechanism

postinstall remote shell download-and-execute

Attack narrative

During global installation, npm runs the declared postinstall hook. The hook invokes `curl -fsSL https://swirls.ai/install | bash` without a pinned artifact or integrity verification, so the endpoint can supply arbitrary shell commands that run as the installer. It then copies a produced binary into the package's `bin/swirls` path.

Rationale

This is concrete, unconsented install-time remote code execution, not merely a user-invoked downloader. Platform and global-install guards reduce reach but do not remove the attack surface.

Evidence

package.jsonscripts/install.jsbin/swirlsbin/README.txt.local/bin/swirls

Network endpoints1

swirls.ai/install

@swirls/cli@0.1.128

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code