@vibelet/cli@1.2.177
Cross-platform CLI for installing and running the Vibelet daemon
AI Security Review
scanned 22d ago · by lpm-firewall-aiInspected code establishes user-invoked Claude hook configuration and agent session control, which the stated policy classifies as warning-level capability. No automatic install hook or concrete malicious chain supports blocking publication.
Static reason
One or more suspicious static signals were detected.
Trigger
Running a managed terminal agent command with a local control token and eligible Claude arguments.
Impact
Allows Vibelet to observe and manage agent sessions; warrants a capability warning under the explicit-command agent configuration policy.
Mechanism
Creates temporary Claude settings and hook scripts, injects settings into agent arguments, and forwards session events to the local daemon.
AI rationale
Inspected code establishes user-invoked Claude hook configuration and agent session control, which the stated policy classifies as warning-level capability. No automatic install hook or concrete malicious chain supports blocking publication.
Evidence
dist/vibelet.mjsdist/index.cjssettings.jsonsession_hook_forwarder.cjs
Network endpoints1
127.0.0.1
Decision evidence
public snapshotAI called this Suspicious at 85.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a CLI without npm lifecycle hooks or a runtime self-dependency.
- Explicit terminal agent commands activate managed native terminal control.
- Claude terminal integration conditionally creates temporary settings and injects them into the launched agent.
- The generated session hook posts to the local daemon at 127.0.0.1.
- The daemon bundle writes Claude hook settings containing command hooks and optional fast mode.
- The inventory worker enumerates Codex session files.
Evidence against
- No unconsented npm install mutation or confirmed malicious exfiltration was established.
- Terminal hook setup requires a local control token and respects existing Claude settings.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcedist/index.cjsView file
1'use strict';const _0x3646c7=_0x3a2c;(function(_0x1bddb6,_0x348bd3){const _0x4e00ad=_0x3a2c,_0x2d06ac=_0x1bddb6();while(!![]){try{const _0x45696c=parseInt(_0x4e00ad(0x350))/0x1+par...
High
1'use strict';const _0x3646c7=_0x3a2c;(function(_0x1bddb6,_0x348bd3){const _0x4e00ad=_0x3a2c,_0x2d06ac=_0x1bddb6();while(!![]){try{const _0x45696c=parseInt(_0x4e00ad(0x350))/0x1+par...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.cjsView on unpkg · L11'use strict';const _0x3646c7=_0x3a2c;(function(_0x1bddb6,_0x348bd3){const _0x4e00ad=_0x3a2c,_0x2d06ac=_0x1bddb6();while(!![]){try{const _0x45696c=parseInt(_0x4e00ad(0x350))/0x1+par...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L1Findings
6 High5 Medium5 Low
HighChild Processdist/index.cjs
HighShell
HighCommand Output Exfiltrationdist/index.cjs
HighObfuscated Payload Loaderdist/index.cjs
HighTrigger Reachable Persistencedist/vibelet.mjs
HighObfuscated
MediumDynamic Requiredist/runtime-version.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/vibelet.mjs
MediumStructural Risk Force Deep Review
LowEvaldist/vibelet.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Low
Affected versions and remediation
This report applies to @vibelet/cli@1.2.177.
See all versions of @vibelet/cli for other recorded verdicts.
- Review the evidence and your use of @vibelet/cli@1.2.177 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.