Loading npm security reports…

@vibgrate/cli@2026.1006.1: Suspicious npm security report (Warn) | LPM Firewall

registry / @vibgrate/cli / 2026.1006.1

@vibgrate/cli@2026.1006.1

vg — local codebase intelligence CLI + MCP server for AI coding agents: deterministic code graph, drift reporting, and version-correct library docs (Apache-2.0)

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

The user runs vg install for selected assistants; the configured assistant later launches the MCP server.

Impact

Agent behavior and executable server selection change after user-command setup; the fallback can resolve a later release without another setup confirmation.

Mechanism

Setup writes skills, instruction blocks, and a vg server entry. Its fallback launcher obtains an unpinned package through npx on subsequent launches.

AI rationale

Inspected source supports explicit-user-command agent configuration mutation, which warrants a warning under the supplied policy. The npm postinstall behavior does not establish a block-eligible agent hijack or other concrete attack.

Evidence

dist/cli.jsdist/chunk-LIAPHEGY.js.mcp.jsonCLAUDE.md.claude/skills/vg/SKILL.md

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Source & flagged code

21 flagged

package.jsonView file

Lines 32-72json

32 }

33 },

34 "files": [

35 "dist",

36 "grammars",

37 "skills",

38 "scripts/postinstall.mjs",

39 "LICENSE",

40 "NOTICE",

41 "README.md",

42 "DOCS.md"

43 ],

44 "scripts": {

45 "build": "pnpm run bundle:grammars && tsup",

46 "bundle:grammars": "node scripts/bundle-grammars.mjs",

47 "stamp:pins": "node scripts/stamp-release-pins.mjs",

48 "check:pins": "node scripts/stamp-release-pins.mjs --check",

49 "stamp:packaging": "node scripts/stamp-packaging.mjs",

50 "check:packaging": "node scripts/stamp-packaging.mjs --check",

51 "demo:svg": "node scripts/gen-demo-svg.mjs",

52 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L52

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L52

53 "dev": "tsx src/cli.ts",

54 "lint": "eslint src",

55 "typecheck": "tsc --noEmit",

56 "test": "vitest run",

57 "bench:suite": "tsx bench/build-suite.bench.ts",

58 "bench:literal": "tsx bench/literal-search.bench.ts",

59 "bench:locate": "tsx bench/locate-quality.bench.ts",

60 "bench:semantic-ask": "tsx bench/semantic-ask.bench.ts",

61 "bench:lib-docs": "tsx bench/lib-docs-quality.bench.ts",

62 "bench:di": "tsx bench/di-quality.bench.ts",

63 "bench:layer-a": "pnpm run bench:locate && pnpm run bench:semantic-ask && pnpm run bench:lib-docs",

64 "bench:vgd": "tsx bench/vgd-runtime.bench.ts"

65 },

66 "keywords": [

67 "code-graph",

68 "codebase-intelligence",

69 "ast",

70 "tree-sitter",

71 "mcp",

72 "ai-agents",

dist/chunk-EZ7UC5Y5.jsView file

Lines 1-23javascript

1import { __esm } from './chunk-Z6ZWNWWR.js';

2import * as fs from 'fs';

3import * as path from 'path';

dist/interactive-7BKI7PXY.jsView file

Lines 725-755javascript

725 if (result.changes.length || perTask) info(c.dim(` ${summary} \xB7 via ${result.provider.id}/${result.provider.model}${

dist/chunk-2JGSNRSI.jsView file

Lines 52-92javascript

52 if (!file) return { file: null, config: null };

53 if (!isDataConfigFile(file)) {

54 return { file, config: null, error: `${file} is code; this setting is read from .vibgrate/config.yml or vibgrate.config.json.`

dist/chunk-GD7PFQIG.jsView file

Lines 1-32javascript

1import { ensureModuleEsmPackageJson, modulesBaseDir, kernelDisabled } from './chunk-JQCCIPWS.js';

2import { globalGraphPathForRef, globalGraphPath, repositoryStoreDir } from './chunk-F4VMXLMV.js';

3import { assertReadableGraph, unreadableGraphError, parseGraph, stableStringify, serializeGraph } from './chunk-HCFSL5MI.js';

4import { VERSION } from

dist/cli.jsView file

26import './chunk-IS7VTH2Q.js'; L27: import { moduleInstalled, removeRelevanceModule, installRelevanceModule, DISCLOSURE, RELEVANCE_MODULE_NAME, exposureSubjectDigest, resolveSigningKey, signEvidenceStatement, buildEv... L28: import './chunk-TMVVYZKC.js'; ... L50: import { isRelevantChange } from './chunk-H53KDGTH.js'; L51: import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as p... L52: import { parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, securityFindingRow, securityPacksLabel, parseDriftBudget, evaluateDrif... ... L96: import { Command, CommanderError, Option } from 'commander'; L97: import { execSync, spaw

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L26

26Trigger-reachable chain: manifest.bin -> dist/cli.js L26: import './chunk-IS7VTH2Q.js'; L27: import { moduleInstalled, removeRelevanceModule, installRelevanceModule, DISCLOSURE, RELEVANCE_MODULE_NAME, exposureSubjectDigest, resolveSigningKey, signEvidenceStatement, buildEv... L28: import './chunk-TMVVYZKC.js'; ... L50: import { isRelevantChange } from './chunk-H53KDGTH.js'; L51: import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as p... L52: import { parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, securityFindingRow, securityPacksLabel, parseDriftBudget, evaluateDrif... ... L96: import { Command, CommanderError, Op

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L26

dist/chunk-JQCCIPWS.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/chunk-JQCCIPWS.js: var DEFAULT_REGISTRY = "https://registry.npmjs.org"; fs.writeFileSync(stateFile(), JSON.stringify(state)); fs.writeFileSync(pkgPath, `${JSON.stringify(body)} fs.writeFileSync(target, e.body); fs.writeFileSync(path.join(dir, ".module.json"), JSON.stringify({ name: mod.npmName, version }));

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-JQCCIPWS.jsView on unpkg

dist/chunk-5P4U6B77.jsView file

32Cross-file remote execution chain: dist/chunk-5P4U6B77.js spawns dist/chunk-LIAPHEGY.js; helper contains network access plus dynamic code execution. L32: import { parseGraph, GraphLoadError, slimGraphForExport, serializeGraph } from './chunk-HCFSL5MI.js'; L33: import { CliError, ExitCode } from './chunk-YYTT5YIN.js'; L34: import { VERSION } from './chunk-WV56X6MC.js'; ... L43: import { createHash, timingSafeEqual, randomUUID } from 'crypto'; L44: import * as http2 from 'http'; L45: import http2__default from 'http'; L46: import { spawn, execFileSync, spawnSync } from 'child_process'; L47: import * as os2 from 'os'; ... L53: import chalk2 from 'chalk'; L54: import * as dns from 'dns'; L55: import * as zlib from 'zlib'; ... L142: try {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-5P4U6B77.jsView on unpkg · L32

grammars/tree-sitter-go.wasmView file

•path = grammars/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

grammars/tree-sitter-go.wasmView on unpkg

dist/chunk-7GJP2T46.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-7GJP2T46.js#virtual:normalized:round1View on unpkg

dist/chunk-ZRPXTSMX.jsView file

•matchType = normalized_sha256 matchedPackage = @vibgrate/cli@2026.910.3 matchedPath = dist/chunk-ZRPXTSMX.js matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.910.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-ZRPXTSMX.jsView on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @vibgrate/cli@2026.910.3 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.910.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

dist/fastembed-75ZZ4EJZ.jsView file

•matchType = normalized_sha256 matchedPackage = @vibgrate/cli@2026.910.3 matchedPath = dist/fastembed-CXX7LSQ6.js matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.910.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/fastembed-75ZZ4EJZ.jsView on unpkg

dist/chunk-YJCBWHKW.jsView file

•matchType = normalized_sha256 matchedPackage = @vibgrate/cli@2026.910.3 matchedPath = dist/chunk-YJCBWHKW.js matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.910.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-YJCBWHKW.jsView on unpkg

dist/chunk-LEEXGKZH.jsView file

•matchType = normalized_sha256 matchedPackage = @vibgrate/cli@2026.910.3 matchedPath = dist/chunk-LEEXGKZH.js matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.910.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-LEEXGKZH.jsView on unpkg

Source & flagged code

21 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/chunk-EZ7UC5Y5.jsView file

3import * as path from 'path'; L4: import { execFileSync } from 'child_process'; L5:

High

Child Process

Package source references child process execution.

dist/chunk-EZ7UC5Y5.jsView on unpkg · L3

dist/interactive-7BKI7PXY.jsView file

745return (command) => { L746: const res = spawnSync(command, { cwd: root, shell: true, encoding: "utf8", timeout: 12e4, maxBuffer: 10 * 1024 * 1024 }); L747: const stdout = (res.stdout ?? "") + (res.stderr ? `

High

Shell

Package source references shell execution.

dist/interactive-7BKI7PXY.jsView on unpkg · L745

dist/chunk-2JGSNRSI.jsView file

72function loadTypeScript() { L73: tsPromise ??= import('typescript').then((m) => { L74: const mod = m;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-2JGSNRSI.jsView on unpkg · L72

dist/chunk-GD7PFQIG.jsView file

12import * as crypto from 'crypto'; L13: import { spawnSync } from 'child_process'; L14: import { parse } from 'smol-toml'; L15: L16: var MAGIC = Buffer.from("VGSNAP1\0", "latin1"); L17: var crc322 = zlib.crc32 ?? jsCrc32; ... L302: function disabled() { L303: const v = process.env.VIBGRATE_NO_KERNEL; L304: return v === "1" || v === "true"; ... L306: function relevanceModuleDir() { L307: const base = process.env.XDG_CACHE_HOME || path7.join(os.homedir(), ".cache"); L308: return path7.join(base, "vibgrate", "modules", "relevance");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-GD7PFQIG.jsView on unpkg · L12

dist/cli.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L26

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L26

dist/chunk-JQCCIPWS.jsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-JQCCIPWS.jsView on unpkg

dist/chunk-5P4U6B77.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-5P4U6B77.jsView on unpkg · L32

grammars/tree-sitter-go.wasmView file

•path = grammars/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

grammars/tree-sitter-go.wasmView on unpkg

dist/chunk-7GJP2T46.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-7GJP2T46.js#virtual:normalized:round1View on unpkg

dist/chunk-ZRPXTSMX.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-ZRPXTSMX.jsView on unpkg

scripts/postinstall.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

dist/fastembed-75ZZ4EJZ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/fastembed-75ZZ4EJZ.jsView on unpkg

dist/chunk-YJCBWHKW.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-YJCBWHKW.jsView on unpkg

dist/chunk-LEEXGKZH.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-LEEXGKZH.jsView on unpkg

Source & flagged code

21 flagged

package.jsonView file

Lines 32-72json

32 }

33 },

34 "files": [

35 "dist",

36 "grammars",

37 "skills",

38 "scripts/postinstall.mjs",

39 "LICENSE",

40 "NOTICE",

41 "README.md",

42 "DOCS.md"

43 ],

44 "scripts": {

45 "build": "pnpm run bundle:grammars && tsup",

46 "bundle:grammars": "node scripts/bundle-grammars.mjs",

47 "stamp:pins": "node scripts/stamp-release-pins.mjs",

48 "check:pins": "node scripts/stamp-release-pins.mjs --check",

49 "stamp:packaging": "node scripts/stamp-packaging.mjs",

50 "check:packaging": "node scripts/stamp-packaging.mjs --check",

51 "demo:svg": "node scripts/gen-demo-svg.mjs",

52 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L52

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L52

53 "dev": "tsx src/cli.ts",

54 "lint": "eslint src",

55 "typecheck": "tsc --noEmit",

56 "test": "vitest run",

57 "bench:suite": "tsx bench/build-suite.bench.ts",

58 "bench:literal": "tsx bench/literal-search.bench.ts",

59 "bench:locate": "tsx bench/locate-quality.bench.ts",

60 "bench:semantic-ask": "tsx bench/semantic-ask.bench.ts",

61 "bench:lib-docs": "tsx bench/lib-docs-quality.bench.ts",

62 "bench:di": "tsx bench/di-quality.bench.ts",

63 "bench:layer-a": "pnpm run bench:locate && pnpm run bench:semantic-ask && pnpm run bench:lib-docs",

64 "bench:vgd": "tsx bench/vgd-runtime.bench.ts"

65 },

66 "keywords": [

67 "code-graph",

68 "codebase-intelligence",

69 "ast",

70 "tree-sitter",

71 "mcp",

72 "ai-agents",

dist/chunk-EZ7UC5Y5.jsView file

Lines 1-23javascript

1import { __esm } from './chunk-Z6ZWNWWR.js';

2import * as fs from 'fs';

3import * as path from 'path';

dist/interactive-7BKI7PXY.jsView file

Lines 725-755javascript

725 if (result.changes.length || perTask) info(c.dim(` ${summary} \xB7 via ${result.provider.id}/${result.provider.model}${

dist/chunk-2JGSNRSI.jsView file

Lines 52-92javascript

52 if (!file) return { file: null, config: null };

53 if (!isDataConfigFile(file)) {

54 return { file, config: null, error: `${file} is code; this setting is read from .vibgrate/config.yml or vibgrate.config.json.`

dist/chunk-GD7PFQIG.jsView file

Lines 1-32javascript

1import { ensureModuleEsmPackageJson, modulesBaseDir, kernelDisabled } from './chunk-JQCCIPWS.js';

2import { globalGraphPathForRef, globalGraphPath, repositoryStoreDir } from './chunk-F4VMXLMV.js';

3import { assertReadableGraph, unreadableGraphError, parseGraph, stableStringify, serializeGraph } from './chunk-HCFSL5MI.js';

4import { VERSION } from

dist/cli.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L26

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L26

dist/chunk-JQCCIPWS.jsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-JQCCIPWS.jsView on unpkg

dist/chunk-5P4U6B77.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-5P4U6B77.jsView on unpkg · L32

grammars/tree-sitter-go.wasmView file

•path = grammars/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

grammars/tree-sitter-go.wasmView on unpkg

dist/chunk-7GJP2T46.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-7GJP2T46.js#virtual:normalized:round1View on unpkg

dist/chunk-ZRPXTSMX.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-ZRPXTSMX.jsView on unpkg

scripts/postinstall.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

dist/fastembed-75ZZ4EJZ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/fastembed-75ZZ4EJZ.jsView on unpkg

dist/chunk-YJCBWHKW.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-YJCBWHKW.jsView on unpkg

dist/chunk-LEEXGKZH.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-LEEXGKZH.jsView on unpkg

@vibgrate/cli@2026.1006.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code