@vibelet/cli@1.2.179
Cross-platform CLI for installing and running the Vibelet daemon
AI Security Review
scanned 29d ago · by lpm-firewall-aiThis is not malicious install-time behavior, but it provides a concrete remote AI-agent-control capability when the CLI is run. Its explicit activation prevents a block, while the default managed remote access warrants a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the CLI with a startup command or explicitly invokes its claude or codex subcommand.
Impact
A paired remote client could gain control over an AI-agent terminal session; this is a dangerous remote-control capability rather than confirmed covert compromise.
Mechanism
The CLI defaults startup commands to a managed remote tunnel, starts a daemon, and launches a selected AI-agent executable through its terminal-control wrapper.
AI rationale
This is not malicious install-time behavior, but it provides a concrete remote AI-agent-control capability when the CLI is run. Its explicit activation prevents a block, while the default managed remote access warrants a warning.
Evidence
dist/vibelet.mjs
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package exposes dist/vibelet.mjs as a user-invoked CLI and has no npm lifecycle scripts.
- The CLI recognises claude and codex commands, starts its daemon, and passes control to a managed native terminal wrapper.
- Startup commands default to managed remote access and can prepare a managed Cloudflare tunnel.
- The terminal wrapper resolves Claude or Codex executables and spawns the selected command.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
8 flagged · loading sourcedist/index.cjsView file
1'use strict';const _0x2c443a=_0x4f2f;(function(_0x701e04,_0x5e37e4){const _0x399e23=_0x4f2f,_0x3361d2=_0x701e04();while(!![]){try{const _0x4f342c=parseInt(_0x399e23(0xc1c))/0x1+par...
High
1'use strict';const _0x2c443a=_0x4f2f;(function(_0x701e04,_0x5e37e4){const _0x399e23=_0x4f2f,_0x3361d2=_0x701e04();while(!![]){try{const _0x4f342c=parseInt(_0x399e23(0xc1c))/0x1+par...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.cjsView on unpkg · L11'use strict';const _0x2c443a=_0x4f2f;(function(_0x701e04,_0x5e37e4){const _0x399e23=_0x4f2f,_0x3361d2=_0x701e04();while(!![]){try{const _0x4f342c=parseInt(_0x399e23(0xc1c))/0x1+par...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L1Findings
6 High5 Medium6 Low
HighChild Processdist/index.cjs
HighShell
HighCommand Output Exfiltrationdist/index.cjs
HighObfuscated Payload Loaderdist/index.cjs
HighTrigger Reachable Persistencedist/vibelet.mjs
HighObfuscated
MediumDynamic Requiredist/runtime-version.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/vibelet.mjs
MediumStructural Risk Force Deep Review
LowEvaldist/vibelet.mjs
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @vibelet/cli@1.2.179.
See all versions of @vibelet/cli for other recorded verdicts.
- Review the evidence and your use of @vibelet/cli@1.2.179 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.