Loading npm security reports…

@vibgrate/cli@2026.826.1: Manual Review npm security report | LPM Firewall

registry / @vibgrate/cli / 2026.826.1

@vibgrate/cli@2026.826.1

⚠ Under review

vg — local codebase intelligence CLI + MCP server for AI coding agents: deterministic code graph, drift reporting, and version-correct library docs (Apache-2.0)

AI Security Review

scanned 19d ago · by lpm-firewall-ai

Inspected source shows a local MCP and code-graph CLI. The install hook is a PATH-conflict notice, credentials follow the caller DSN host, and scanner-similar chunks are catalog, model-plan, and attestation code. No confirmed covert exfiltration or unconsented install-time agent hijack remains, but a clean verdict cannot be emitted because nine required citation paths exceed the eight-citation cap.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm install runs postinstall; users later run vg commands such as serve, push, or install.

Impact

no confirmed malicious impact from inspected source

Mechanism

no confirmed attack chain; citation-capacity block on a clean verdict

AI rationale

Source inspection of the install hook, DSN posts, and high-risk chunks matches a first-party local MCP CLI rather than malware, and those behaviors are user-invoked or bound to the credential host. A mark_clean result cannot be returned because it would need nine distinct citations while only eight are allowed.

Decision evidence

public snapshot

AI called this Manual Review at 74.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json runs only scripts/postinstall.mjs at install time.
postinstall looks up vg on PATH and always exits 0 after a conflict notice.

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/chunk-EZ7UC5Y5.jsView file

3import * as path from 'path'; L4: import { execFileSync } from 'child_process'; L5:

High

Child Process

Package source references child process execution.

dist/chunk-EZ7UC5Y5.jsView on unpkg · L3

dist/chunk-IS7VTH2Q.jsView file

559cwd: options.cwd, L560: shell: true, L561: encoding: "utf8",

High

Shell

Package source references shell execution.

dist/chunk-IS7VTH2Q.jsView on unpkg · L559

dist/fastembed-S6YEJYQV.jsView file

19try { L20: const req = createRequire(path.join(hostDir, "package.json")); L21: return await import(pathToFileURL(req.resolve(spec)).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/fastembed-S6YEJYQV.jsView on unpkg · L19

dist/chunk-IM7HME2T.jsView file

20L21: var DEFAULT_REGISTRY = "https://registry.npmjs.org"; L22: function registryBase(opts) { L23: return (process.env.VIBGRATE_MODULE_REGISTRY || opts.registry || DEFAULT_REGISTRY).replace(/\/+$/, ""); L24: } L25: function modulesBaseDir() { L26: const base = process.env.XDG_CACHE_HOME || path.join(os.homedir(), ".cache"); L27: return path.join(base, "vibgrate", "modules"); ... L33: try { L34: return JSON.parse(fs.readFileSync(stateFile(), "utf8")); L35: } catch { ... L103: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-IM7HME2T.jsView on unpkg · L20

dist/cli.jsView file

31import { driftCount, ASSISTANTS, detectAssistants, isAssistantInstalled, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, buildGraph, writeSnapshot, ... L32: import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as p... L33: import { resolveIngestHost, dashHostForIngestHost, availableRegionIds, ingestHostForRegionId } from './chunk-HTLDXEHW.js'; ... L40: import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-57ZRSCHY.js'; L41: import { CliError, ExitCode, usageError, engineUnavailable } from './chunk-MS6V5XKB.js'; L42: import { attachVgd } from './chunk-E44I7635.js'; .

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L31

31Trigger-reachable chain: manifest.bin -> dist/cli.js L31: import { driftCount, ASSISTANTS, detectAssistants, isAssistantInstalled, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, buildGraph, writeSnapshot, ... L32: import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as p... L33: import { resolveIngestHost, dashHostForIngestHost, availableRegionIds, ingestHostForRegionId } from './chunk-HTLDXEHW.js'; ... L40: import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-57ZRSCHY.js'; L41: import { CliError, ExitCode, usageError, engineUnavailable } from './chunk-MS6V5XKB.js'; L4

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L31

grammars/tree-sitter-go.wasmView file

•path = grammars/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

grammars/tree-sitter-go.wasmView on unpkg

dist/chunk-IM7HME2T.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-IM7HME2T.js#virtual:normalized:round1View on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @vibgrate/cli@2026.910.3 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.910.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

dist/chunk-WHNB3443.jsView file

•matchType = normalized_sha256 matchedPackage = @vibgrate/cli@2026.910.3 matchedPath = dist/chunk-2AGBVXME.js matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.910.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-WHNB3443.jsView on unpkg

dist/chunk-W44THEXF.jsView file

•matchType = normalized_sha256 matchedPackage = @vibgrate/cli@2026.910.3 matchedPath = dist/chunk-YJCBWHKW.js matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.910.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-W44THEXF.jsView on unpkg

dist/chunk-WGA4KUGS.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @vibgrate/cli@2026.911.1 matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.911.1 similarity = 0.368 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-WGA4KUGS.jsView on unpkg