registry / @vibedrift/cli / 0.15.0

@vibedrift/cli@0.15.0

Ship agentic. Stay coherent. Self-checking code integrity for AI coding agents, in the loop via MCP.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 1.22 MB of source, external domains: img.shields.io, registry.npmjs.org, schemas.openxmlformats.org, thevibelang.org, vibedrift-api.fly.dev, vibedrift.ai

Source & flagged code

7 flagged

dist/render.jsView file

Lines 949-989javascript

949

950// src/output/terminal.ts

951import chalk from "chalk";

952

953// src/output/format.ts

954var COUNT_FORMATTER = new Intl.NumberFormat("en-US");

955function formatCount(n) {

956 return COUNT_FORMATTER.format(n);

957}

958

959// src/codedna/taint-analysis.ts

960var TAINT_SINKS = [

961 // SQL injection

962 { regex: /db\.Query\s*\(/, label: "SQL query", severity: "error", category: "sql_injection" },

963 { regex: /db\.Exec\s*\(/, label: "SQL exec", severity: "error", category: "sql_injection" },

964 { regex: /\.query\s*\(\s*[`'"]/, label: "SQL query string", severity: "error", category: "sql_injection" },

965 { regex: /cursor\.execute\s*\(/, label: "SQL execute", severity: "error", category: "sql_injection" },

966 { regex: /\.raw\s*\(/, label: "raw SQL query", severity: "error", category: "sql_injection" },

967 // Command injection

968 { regex: /exec\s*\(/, label: "command execution", severity: "error", category: "command_injection" },

969 { regex: /execSync\s*\(/, label: "sync command execution", severity: "error", category: "command_injection" },

970 { regex: /child_process/, label: "child process", severity: "error", category: "command_injection" },

971 { regex: /os\.system\s*\(/, label: "OS system call", severity: "error", category: "command_injection" },

High

Child Process

Package source references child process execution.

dist/render.jsView on unpkg · L969

972 { regex: /subprocess\.(?:call|run|Popen)\s*\(/, label: "subprocess call", severity: "error", category: "command_injection" },

973 // Path traversal

974 { regex: /fs\.readFile\s*\(/, label: "file read", severity: "warning", category: "path_traversal" },

975 { regex: /fs\.writeFile\s*\(/, label: "file write", severity: "warning", category: "path_traversal" },

976 { regex: /os\.Open\s*\(/, label: "file open", severity: "warning", category: "path_traversal" },

977 { regex: /open\s*\(/, label: "file open", severity: "warning", category: "path_traversal" },

978 // XSS

979 { regex: /innerHTML\s*=/, label: "HTML injection", severity: "error", category: "xss" },

980 { regex: /dangerouslySetInnerHTML/, label: "React HTML injection", severity: "error", category: "xss" },

981 { regex: /eval\s*\(/, label: "code evaluation", severity: "error", category: "code_injection" },

982 { regex: /Function\s*\(/, label: "dynamic function", severity: "error", category: "code_injection" },

983 // Outbound (lower severity)

984 { regex: /fetch\s*\(/, label: "outbound HTTP fetch", severity: "warning", category: "ssrf" },

985 { regex: /http\.Get\s*\(/, label: "outbound HTTP GET", severity: "warning", category: "ssrf" },

986 { regex: /axios\.\w+\s*\(/, label: "outbound HTTP request", severity: "warning", category: "ssrf" }

987];

988var INJECTION_SINK_LABELS = new Set(

989 TAINT_SINKS.filter((s) => s.category === "code_injection" || s.category === "command_injection").map(

dist/cli/index.jsView file

16881command: `npm i -g ${pkgSpec}`, L16882: options: { stdio: "inherit", shell: true } L16883: };

High

Shell

Package source references shell execution.

dist/cli/index.jsView on unpkg · L16881

80__export(git_metadata_exports, { L81: collectGitMetadata: () => collectGitMetadata, L82: getChangedFiles: () => getChangedFiles L83: }); L84: import { execFile } from "child_process"; L85: import { promisify } from "util"; ... L94: async function runGit(cwd, args) { L95: const { stdout } = await execFileP("git", args, { L96: cwd, ... L129: const buf = await readFile2(cachePath(rootDir), "utf8"); L130: const entry = JSON.parse(buf); L131: if (entry.headCommit !== head) return null;

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/cli/index.jsView on unpkg · L80

16638init_plan(); L16639: import { execFile as execFile2 } from "child_process"; L16640: import { promisify as promisify2 } from "util"; ... L16653: if ! command -v vibedrift >/dev/null 2>&1; then L16654: echo "vibedrift not on PATH; skipping drift check (npm i -g @vibedrift/cli)" >&2 L16655: exit 0

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/index.jsView on unpkg · L16638

skills/vibedrift/scripts/vibedrift-tools.mjsView file

Lines 26-66javascript

26 for (let i = 0; i < rest.length; i++) {

27 const a = rest[i];

28 if (a === "--deep") flags.deep = true;

Source & flagged code

7 flagged · loading source

dist/render.jsView file

969{ regex: /execSync\s*\(/, label: "sync command execution", severity: "error", category: "command_injection" }, L970: { regex: /child_process/, label: "child process", severity: "error", category: "command_injection" }, L971: { regex: /os\.system\s*\(/, label: "OS system call", severity: "error", category: "command_injection" },

High

Child Process

Package source references child process execution.

dist/render.jsView on unpkg · L969

dist/cli/index.jsView file

16881command: `npm i -g ${pkgSpec}`, L16882: options: { stdio: "inherit", shell: true } L16883: };

High

Shell

Package source references shell execution.

dist/cli/index.jsView on unpkg · L16881

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/cli/index.jsView on unpkg · L80

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/index.jsView on unpkg · L16638

11732patternName = generic_password severity = medium line = 11732 matchedText = // NOTE:...s>"`

Medium

Secret Pattern

Hardcoded password in dist/cli/index.js

dist/cli/index.jsView on unpkg · L11732

11809id: "eval-usage", L11810: name: "eval() usage", L11811: pattern: /\beval\s*\(/g,

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/cli/index.jsView on unpkg · L11809

skills/vibedrift/scripts/vibedrift-tools.mjsView file

46try { L47: return await import("@vibedrift/cli/tools"); L48: } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

skills/vibedrift/scripts/vibedrift-tools.mjsView on unpkg · L46

Findings

4 High5 Medium6 Low

HighChild Processdist/render.js

HighShelldist/cli/index.js

HighObfuscated Payload Loaderdist/cli/index.js

HighRuntime Package Installdist/cli/index.js

MediumDynamic Requireskills/vibedrift/scripts/vibedrift-tools.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/cli/index.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/cli/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/render.jsView file

Lines 949-989javascript

949

950// src/output/terminal.ts

951import chalk from "chalk";

952

953// src/output/format.ts

954var COUNT_FORMATTER = new Intl.NumberFormat("en-US");

955function formatCount(n) {

956 return COUNT_FORMATTER.format(n);

957}

958

959// src/codedna/taint-analysis.ts

960var TAINT_SINKS = [

961 // SQL injection

962 { regex: /db\.Query\s*\(/, label: "SQL query", severity: "error", category: "sql_injection" },

963 { regex: /db\.Exec\s*\(/, label: "SQL exec", severity: "error", category: "sql_injection" },

964 { regex: /\.query\s*\(\s*[`'"]/, label: "SQL query string", severity: "error", category: "sql_injection" },

965 { regex: /cursor\.execute\s*\(/, label: "SQL execute", severity: "error", category: "sql_injection" },

966 { regex: /\.raw\s*\(/, label: "raw SQL query", severity: "error", category: "sql_injection" },

967 // Command injection

968 { regex: /exec\s*\(/, label: "command execution", severity: "error", category: "command_injection" },

969 { regex: /execSync\s*\(/, label: "sync command execution", severity: "error", category: "command_injection" },

970 { regex: /child_process/, label: "child process", severity: "error", category: "command_injection" },

971 { regex: /os\.system\s*\(/, label: "OS system call", severity: "error", category: "command_injection" },

High

Child Process

Package source references child process execution.

dist/render.jsView on unpkg · L969

972 { regex: /subprocess\.(?:call|run|Popen)\s*\(/, label: "subprocess call", severity: "error", category: "command_injection" },

973 // Path traversal

974 { regex: /fs\.readFile\s*\(/, label: "file read", severity: "warning", category: "path_traversal" },

975 { regex: /fs\.writeFile\s*\(/, label: "file write", severity: "warning", category: "path_traversal" },

976 { regex: /os\.Open\s*\(/, label: "file open", severity: "warning", category: "path_traversal" },

977 { regex: /open\s*\(/, label: "file open", severity: "warning", category: "path_traversal" },

978 // XSS

979 { regex: /innerHTML\s*=/, label: "HTML injection", severity: "error", category: "xss" },

980 { regex: /dangerouslySetInnerHTML/, label: "React HTML injection", severity: "error", category: "xss" },

981 { regex: /eval\s*\(/, label: "code evaluation", severity: "error", category: "code_injection" },

982 { regex: /Function\s*\(/, label: "dynamic function", severity: "error", category: "code_injection" },

983 // Outbound (lower severity)

984 { regex: /fetch\s*\(/, label: "outbound HTTP fetch", severity: "warning", category: "ssrf" },

985 { regex: /http\.Get\s*\(/, label: "outbound HTTP GET", severity: "warning", category: "ssrf" },

986 { regex: /axios\.\w+\s*\(/, label: "outbound HTTP request", severity: "warning", category: "ssrf" }

987];

988var INJECTION_SINK_LABELS = new Set(

989 TAINT_SINKS.filter((s) => s.category === "code_injection" || s.category === "command_injection").map(

dist/cli/index.jsView file

16881command: `npm i -g ${pkgSpec}`, L16882: options: { stdio: "inherit", shell: true } L16883: };

High

Shell

Package source references shell execution.

dist/cli/index.jsView on unpkg · L16881

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/cli/index.jsView on unpkg · L80

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/index.jsView on unpkg · L16638

skills/vibedrift/scripts/vibedrift-tools.mjsView file

Lines 26-66javascript

26 for (let i = 0; i < rest.length; i++) {

27 const a = rest[i];

28 if (a === "--deep") flags.deep = true;