@vibeapi/cli@0.0.144
CLI tool for managing AI coding assistants (Claude Code, Codex, OpenClaw, Hermes, AtomCode, Grok Build) with one unified config
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe source does not show a clear attack, but normal Claude Desktop setup applies wildcard network and SSH permissions and enables automatic import/export. Runtime telemetry also sends OS/runtime metadata and command details to the configured VibeAPI service without README disclosure.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user applies the Claude Desktop configuration through the CLI.
Impact
Claude Desktop receives broad network and SSH access settings, increasing the impact of assistant actions.
Mechanism
The adapter defaults Cowork egress and SSH host allowlists to all hosts and enables automatic third-party import and export.
AI rationale
The source does not show a clear attack, but normal Claude Desktop setup applies wildcard network and SSH permissions and enables automatic import/export. Runtime telemetry also sends OS/runtime metadata and command details to the configured VibeAPI service without README disclosure.
Evidence
dist/lib/tools/claude-desktop.jsdist/lib/tool-manager.jsdist/lib/telemetry.jsdist/brand.jsonClaude Desktop user-data directory/claude_desktop_config.jsonClaude Desktop user-data directory/configLibrary/<id>.json
Network endpoints1
www.vibeapi.cn/api/platform/vibecode/telemetry (default configured gateway; the base URL is configurable)
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Claude Desktop configuration defaults Cowork egress and SSH host allowlists to "*" and enables automatic third-party import and export.
- The tool manager passes configuration settings to the Claude Desktop adapter when applying private configuration.
- Runtime telemetry includes OS and runtime metadata, command details, and errors, and posts events to /api/platform/vibecode/telemetry.
- The package lists https://www.vibeapi.cn as a gateway address.
Evidence against
- The manifest exposes a CLI executable and declares no install lifecycle hook.
- The broad Claude Desktop settings are applied through the package's configuration workflow; no automatic account action or credential theft was identified.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/lib/tools/desktop-process.jsView file
1import{spawnSync as e}from"child_process";import{logger as t}from"../../utils/logger.js";export const WINDOWS_PACKAGE_FAMILIES=["Claude_pzs8sxrjxfjjc","AnthropicPBC.Claude_fnn82j28...
High
Child Process
Package source references child process execution.
dist/lib/tools/desktop-process.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
1 Critical5 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/lib/tools/claude-desktop.js
HighChild Processdist/lib/tools/desktop-process.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @vibeapi/cli@0.0.144.
See all versions of @vibeapi/cli for other recorded verdicts.
- Review the evidence and your use of @vibeapi/cli@0.0.144 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.