Loading npm security reports…

@vibelet/cli: Malicious npm security report (Block) | LPM Firewall

registry / @vibelet/cli / 1.2.154

@vibelet/cli@1.2.154

Cross-platform CLI for installing and running the Vibelet daemon

AI Security Review

scanned 5d ago · by lpm-firewall-ai

A user-invoked CLI installs and starts a persistent local daemon, optionally exposing it through a Cloudflare Tunnel. It can launch and relay Claude/Codex terminal-agent sessions; this is a high-risk remote-control capability but is package-aligned and not install-time.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs `vibelet`, `vibelet start`, `vibelet claude`, or `vibelet codex`.

Impact

A paired remote client may control coding-agent sessions on the host.

Mechanism

Persistent daemon plus tunneled remote terminal-agent control

Rationale

The package is not proven malicious, but its obfuscated daemon, persistence, default remote tunnel, and remote coding-agent control create substantial user-host risk. Flag as a warning rather than block because activation is user-invoked and no concrete malicious chain was found.

Evidence

package.jsonREADME.mddist/vibelet.mjsdist/index.cjs~/.vibelet/runtime/current/dist/index.cjs~/.vibelet/relay.json~/.vibelet/tunnel.json

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-10720

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @vibelet/cli (npm)

Source & flagged code

2 flagged

dist/web/assets/codeql-DsOJ9woJ.jsView file

Lines 1-2javascript

1const e=Object.freeze(JSON.parse('{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\babstract(?![0-9A-Z_a-z])","name":"storage.modifier.abstract.ql"},"additional":{"match":"\\\\badditional(?![0-9A-Z_a-z])","name":"storage.modifier.additional.ql"},"and":{"match":"\\\\band(?![0-9A-Z_a-z])","name":"keyword.other.and.ql"},"annotation":{"patterns":[{"include":"#bindingset-annotation"},{"include":"#language-annotation"},{"include":"#pragma-annotation"},{"include":"#annotation-keyword"}]},"annotation-keywo ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/codeql-DsOJ9woJ.jsView on unpkg · L1

Long lines were clipped for display.

dist/web/assets/mermaid-O7DHMXV3-BA2glr4S.jsView file

189contains invisible/control Unicode U+200B (zero width space) `).at(-1);if(s&&s.trim().length>0)return`${e}<U+200B>`}if(aC.test(i)&&!n.match(oC)){let s=r.split(`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/web/assets/mermaid-O7DHMXV3-BA2glr4S.jsView on unpkg · L189

Source & flagged code

2 flagged · loading source

dist/web/assets/codeql-DsOJ9woJ.jsView file

1const e=Object.freeze(JSON.parse('{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/codeql-DsOJ9woJ.jsView on unpkg · L1

dist/web/assets/mermaid-O7DHMXV3-BA2glr4S.jsView file

189contains invisible/control Unicode U+200B (zero width space) `).at(-1);if(s&&s.trim().length>0)return`${e}<U+200B>`}if(aC.test(i)&&!n.match(oC)){let s=r.split(`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/web/assets/mermaid-O7DHMXV3-BA2glr4S.jsView on unpkg · L189

@vibelet/cli@1.2.154

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code