@vibeapi/api-helper@0.0.142
CLI tool for managing AI coding assistants (Claude Code, Codex, OpenClaw, Hermes, AtomCode, Grok Build) with one unified config
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s core functionality appears consistent with its purpose, and I found no concrete malicious attack chain. However, it sends runtime telemetry by default without an evident disclosure in the inspected README, so this warrants a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI; telemetry is flushed after command execution.
Impact
The vendor can track usage and receive error details without an explicit telemetry opt-in.
Mechanism
The CLI posts event batches to the VibeAPI gateway, including an install ID, OS release, architecture, Node version, and event fields that may contain error text.
AI rationale
The package’s core functionality appears consistent with its purpose, and I found no concrete malicious attack chain. However, it sends runtime telemetry by default without an evident disclosure in the inspected README, so this warrants a warning.
Evidence
dist/lib/telemetry.jsdist/lib/command.jsdist/cli.jsdist/brand.json
Network endpoints1
www.vibeapi.cn/api/platform/vibecode/telemetry
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime telemetry is enabled unless VIBECLI_TELEMETRY is explicitly set to 0, false, or off.
- Telemetry events can include command, step, status, error text, and details; the accompanying payload includes an install ID, brand, OS release, architecture, and Node version.
- The CLI flushes telemetry after command execution, and its default sender posts events to the VibeAPI gateway.
- The package’s stated purpose is managing AI coding assistant tools, consistent with its process execution and install commands.
Evidence against
- The telemetry contains usage and runtime fields rather than an evident credential collection flow; error text is truncated and passed through secret and home-path masking.
- Telemetry can be disabled through the VIBECLI_TELEMETRY environment variable.
- The process execution and install functionality align with the package’s stated CLI purpose.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
Source & flagged code
7 flaggeddist/lib/tools/desktop-process.jsView file
1import{spawnSync as e}from"child_process";import{logger as t}from"../../utils/logger.js";export const WINDOWS_PACKAGE_FAMILIES=["Claude_pzs8sxrjxfjjc","AnthropicPBC.Claude_fnn82j28...
High
Child Process
Package source references child process execution.
dist/lib/tools/desktop-process.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
1 Critical5 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/lib/auto-update.js
HighChild Processdist/lib/tools/desktop-process.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @vibeapi/api-helper@0.0.142.
See all versions of @vibeapi/api-helper for other recorded verdicts.
- Review the evidence and your use of @vibeapi/api-helper@0.0.142 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.