registry / @vibelet/cli / 1.2.211
@vibelet/cli@1.2.211
Cross-platform CLI for installing and running the Vibelet daemon
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe required agent-integration locations are executable PATH construction rather than configuration writes. Package metadata exposes a CLI without lifecycle hooks or a self-dependency chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the Vibelet CLI and its daemon service setup.
Impact
No confirmed agent-control mutation, credential export, destructive action, or install-time attack was established.
Mechanism
The CLI supplies executable search directories, including existing Claude and Codex locations, to the daemon environment.
AI rationale
The required agent-integration locations are executable PATH construction rather than configuration writes. Package metadata exposes a CLI without lifecycle hooks or a self-dependency chain.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Package metadata exposes the Vibelet executable directly and contains no lifecycle-script section.
- Both indicated agent-related locations add Claude and Codex executable directories to a service PATH; they do not write agent configuration.
- The service PATH is used so the package daemon can locate child command-line tools.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
10 flagged · loading sourcedist/vibelet.mjsView file
20*
L21: * http://www.opensource.org/licenses/mit-license.php
L22: *
...
L1769: // add binary data sequence to buffer
L1770: data.write(buffer)
L1771: })
...
L2832: if (err) cb(err)
L2833: let url = 'data:image/png;base64,'
L2834: url += output.toString('base64')
...
L6266: /* istanbul ignore else */
L6267: if (!process.env.WS_NO_BUFFER_UTIL) {
L6268: try {
Critical
Download Execute
Source downloads or fetches remote code and executes it.
dist/vibelet.mjsView on unpkg · L2020Trigger-reachable chain: manifest.bin -> dist/vibelet.mjs
L20: *
L21: * http://www.opensource.org/licenses/mit-license.php
L22: *
...
L1769: // add binary data sequence to buffer
L1770: data.write(buffer)
L1771: })
...
L2832: if (err) cb(err)
L2833: let url = 'data:image/png;base64,'
L2834: url += output.toString('base64')
...
L6266: /* istanbul ignore else */
L6267: if (!process.env.WS_NO_BUFFER_UTIL) {
L6268: try {
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/vibelet.mjsView on unpkg · L2011254L11255: module.exports = __WEBPACK_EXTERNAL_createRequire(import.meta.url)("node:child_process");
L11256:
High
Findings
3 Critical5 High6 Medium4 Low
CriticalDownload Executedist/vibelet.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/vibelet.mjs
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/vibelet.mjs
HighEvaldist/vibelet.mjs
HighCross File Remote Execution Contextdist/vibelet.mjs
HighTrigger Reachable Persistencedist/vibelet.mjs
HighObfuscated
MediumDynamic Requiredist/runtime-version.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/vibelet.mjs
MediumShips Native Binarydist/tailcat/vibelet-tailcat-win32-amd64.exe
Affected versions and remediation
This report applies to @vibelet/cli@1.2.211.
See all versions of @vibelet/cli for other recorded verdicts.
- Review the evidence and your use of @vibelet/cli@1.2.211 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.