@vibelet/cli@1.2.220
Cross-platform CLI for installing and running the Vibelet daemon
AI Security Review
scanned 19d ago · by lpm-firewall-aiSource supports explicit-command agent hook configuration, warranting a behavior-specific warning. The scanner's malicious label is not supported by confirmed install abuse, credential theft, or unrelated remote payload execution.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Invoking the CLI's managed agent command, with the required local control token and session conditions.
Impact
The integration can observe and participate in agent session control. Inspected evidence does not establish covert external export or install-time hijacking.
Mechanism
Generated temporary settings attach executable hooks that forward session events to the local daemon; the daemon bundle also constructs tool-use hooks.
AI rationale
Source supports explicit-command agent hook configuration, warranting a behavior-specific warning. The scanner's malicious label is not supported by confirmed install abuse, credential theft, or unrelated remote payload execution.
Evidence
dist/index.cjsdist/vibelet.mjssettings.jsonsession_hook_forwarder.cjs
Network endpoints1
127.0.0.1
Decision evidence
public snapshotAI called this Suspicious at 85.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes dist/vibelet.mjs as the CLI and contains no install lifecycle hooks or runtime self-dependency.
- dist/index.cjs constructs session and tool-use hooks that execute local forwarding scripts.
- The indicated inventory worker location enumerates Claude session files; the CLI location adds agent executable directories to its service search path.
- An explicit agent command starts terminal management, which conditionally supplies generated Claude hook settings.
- Hook settings are created in a temporary directory, and session events are posted to 127.0.0.1.
Evidence against
- No covert credential export or malicious install behavior was established.
- Dynamic evaluation loads optional WebSocket dependencies; the inspected download operation updates cloudflared.
- Temporary terminal hook files are removed during cleanup.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem
Source & flagged code
10 flagged · loading sourcedist/vibelet.mjsView file
20*
L21: * http://www.opensource.org/licenses/mit-license.php
L22: *
...
L1769: // add binary data sequence to buffer
L1770: data.write(buffer)
L1771: })
...
L2832: if (err) cb(err)
L2833: let url = 'data:image/png;base64,'
L2834: url += output.toString('base64')
...
L6266: /* istanbul ignore else */
L6267: if (!process.env.WS_NO_BUFFER_UTIL) {
L6268: try {
Critical
Download Execute
Source downloads or fetches remote code and executes it.
dist/vibelet.mjsView on unpkg · L2020Trigger-reachable chain: manifest.bin -> dist/vibelet.mjs
L20: *
L21: * http://www.opensource.org/licenses/mit-license.php
L22: *
...
L1769: // add binary data sequence to buffer
L1770: data.write(buffer)
L1771: })
...
L2832: if (err) cb(err)
L2833: let url = 'data:image/png;base64,'
L2834: url += output.toString('base64')
...
L6266: /* istanbul ignore else */
L6267: if (!process.env.WS_NO_BUFFER_UTIL) {
L6268: try {
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/vibelet.mjsView on unpkg · L2011254L11255: module.exports = __WEBPACK_EXTERNAL_createRequire(import.meta.url)("node:child_process");
L11256:
High
Findings
3 Critical5 High6 Medium4 Low
CriticalDownload Executedist/vibelet.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/vibelet.mjs
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/vibelet.mjs
HighEvaldist/vibelet.mjs
HighCross File Remote Execution Contextdist/vibelet.mjs
HighTrigger Reachable Persistencedist/vibelet.mjs
HighObfuscated
MediumDynamic Requiredist/runtime-version.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/vibelet.mjs
MediumShips Native Binarydist/tailcat/vibelet-tailcat-win32-amd64.exe
Affected versions and remediation
This report applies to @vibelet/cli@1.2.220.
See all versions of @vibelet/cli for other recorded verdicts.
- Review the evidence and your use of @vibelet/cli@1.2.220 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.