registry / @vibelet/cli / 1.2.154

@vibelet/cli@1.2.154

Cross-platform CLI for installing and running the Vibelet daemon

AI Security Review

scanned 5d ago · by lpm-firewall-ai

A user-invoked CLI installs and starts a persistent local daemon, optionally exposing it through a Cloudflare Tunnel. It can launch and relay Claude/Codex terminal-agent sessions; this is a high-risk remote-control capability but is package-aligned and not install-time.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs `vibelet`, `vibelet start`, `vibelet claude`, or `vibelet codex`.

Impact

A paired remote client may control coding-agent sessions on the host.

Mechanism

Persistent daemon plus tunneled remote terminal-agent control

Rationale

The package is not proven malicious, but its obfuscated daemon, persistence, default remote tunnel, and remote coding-agent control create substantial user-host risk. Flag as a warning rather than block because activation is user-invoked and no concrete malicious chain was found.

Evidence

package.jsonREADME.mddist/vibelet.mjsdist/index.cjs~/.vibelet/runtime/current/dist/index.cjs~/.vibelet/relay.json~/.vibelet/tunnel.json

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-10720

Source

OpenSSF Malicious Packages via OSV

Summary

The @vibelet/cli package ships a daemon bundle (dist/index.cjs, invoked by the `vibelet` bin and by `vibelet start`/`restart`/`reset`) that starts an HTTP+WebSocket server, spawns an interactive PTY running process.env.SHELL via node-pty, and pipes network-received 'input' and 'resize' messages into that PTY. By default the CLI provisions a public Cloudflare tunnel (trycloudflare.com, using the bundled `cloudflared` and `ws` dependencies) that fronts this endpoint, so any remote party that pairs with the daemon (or obtains the tunnel URL together with the short-lived pair token) can execute arbitrary commands in a full interactive shell on the installer's host. The daemon bundle is packed with obfuscator.io-style transforms (string-array dispatcher `_0x9d44`, hex-encoded identifiers, control-flow flattening) rather than ordinary minification, which obscures the network-to-PTY path.

@vibelet/cli@1.2.154

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code