@swirls/cli@0.1.135
Swirls command line application
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package creates a concrete automatic remote-code-execution supply-chain risk, but the inspected source does not establish malicious payload content or hostile intent. This warrants a warning rather than a publication block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Global npm or Bun installation on a non-Windows system outside CI.
Impact
A compromised or changed swirls.ai install endpoint can execute arbitrary code with the installing user's privileges.
Mechanism
Postinstall remote shell execution through curl piped to Bash.
AI rationale
The package creates a concrete automatic remote-code-execution supply-chain risk, but the inspected source does not establish malicious payload content or hostile intent. This warrants a warning rather than a publication block.
Evidence
package.jsonscripts/install.js$HOME/.local/bin/swirlsbin/swirls
Network endpoints1
swirls.ai/install
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- The manifest automatically runs a postinstall script.
- On global non-Windows installs, the script downloads a remote URL and pipes it directly to Bash.
- The installer replaces the package executable with a binary from the user's local bin directory.
Evidence against
- The trigger is limited to global npm or Bun installation and skips CI and Windows.
- The inspected files contain no secret harvesting, data exfiltration, self-dependency, or AI-agent configuration changes.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
UrlStrings
NoLicense
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgscripts/install.jsView file
13L14: import { execSync } from 'node:child_process'
L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs'
...
L18:
L19: const INSTALL_URL = 'https://swirls.ai/install'
L20:
...
L28: const INSTALLED_BINARY = join(
L29: process.env.HOME || process.env.USERPROFILE || '',
L30: '.local',
...
L36:
L37: if (process.env.CI === 'true' || process.env.CI === '1') {
L38: process.exit(0)
Critical
Download Execute
Source downloads or fetches remote code and executes it.
Findings
2 Critical7 High3 Medium4 Low
CriticalDownload Executescripts/install.js
CriticalTrigger Reachable Dangerous Capabilityscripts/install.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processscripts/install.js
HighShellscripts/install.js
HighSandbox Evasion Gated Capabilityscripts/install.js
HighSemantic Analysis Limitedbin/swirls
HighKnown Malware Source Similarityscripts/install.js
HighKnown Malware Source Fingerprint Signaturescripts/install.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @swirls/cli@0.1.135.
See all versions of @swirls/cli for other recorded verdicts.
- Review the evidence and your use of @swirls/cli@0.1.135 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.