registry / @vibelet/cli / 1.2.178
@vibelet/cli@1.2.178
Cross-platform CLI for installing and running the Vibelet daemon
AI Security Review
scanned 29d ago · by lpm-firewall-aiThe user-invoked daemon and temporary hook setup are real high-risk capabilities, but no automatic install execution or concrete malicious sink was established. Downgrade to a warning for guarded agent-extension lifecycle risk.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the CLI and reaches a daemon or terminal-control command path.
Impact
This is a guarded agent-extension capability with persistence potential, but the inspected code did not establish unconsented broad configuration mutation or data theft.
Mechanism
The CLI spawns a detached runtime daemon; the bundled daemon constructs temporary hook-forwarder files and settings.
AI rationale
The user-invoked daemon and temporary hook setup are real high-risk capabilities, but no automatic install execution or concrete malicious sink was established. Downgrade to a warning for guarded agent-extension lifecycle risk.
Evidence
~/.vibelet/runtime/currenttemporary vibelet-claude-hooks directory
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a user-invoked CLI and declares no npm lifecycle scripts.
- The CLI starts a detached local daemon only after its command flow reaches backend.start().
- The bundled daemon creates temporary Claude hook forwarders and a hook settings file, an agent-extension capability obscured by minification.
Evidence against
- No install, preinstall, postinstall, or self-dependency was declared.
- No confirmed unconsented credential export or foreign agent-control-surface mutation was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
8 flagged · loading sourcedist/index.cjsView file
1'use strict';const _0x23f3b8=_0x3e7d;(function(_0x59b8e7,_0x51ce6e){const _0x495e8d=_0x3e7d,_0x13abda=_0x59b8e7();while(!![]){try{const _0x2d7ca3=parseInt(_0x495e8d(0x441))/0x1*(-p...
High
1'use strict';const _0x23f3b8=_0x3e7d;(function(_0x59b8e7,_0x51ce6e){const _0x495e8d=_0x3e7d,_0x13abda=_0x59b8e7();while(!![]){try{const _0x2d7ca3=parseInt(_0x495e8d(0x441))/0x1*(-p...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.cjsView on unpkg · L11'use strict';const _0x23f3b8=_0x3e7d;(function(_0x59b8e7,_0x51ce6e){const _0x495e8d=_0x3e7d,_0x13abda=_0x59b8e7();while(!![]){try{const _0x2d7ca3=parseInt(_0x495e8d(0x441))/0x1*(-p...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L1Findings
6 High5 Medium6 Low
HighChild Processdist/index.cjs
HighShell
HighCommand Output Exfiltrationdist/index.cjs
HighObfuscated Payload Loaderdist/index.cjs
HighTrigger Reachable Persistencedist/vibelet.mjs
HighObfuscated
MediumDynamic Requiredist/runtime-version.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/vibelet.mjs
MediumStructural Risk Force Deep Review
LowEvaldist/vibelet.mjs
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @vibelet/cli@1.2.178.
See all versions of @vibelet/cli for other recorded verdicts.
- Review the evidence and your use of @vibelet/cli@1.2.178 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.