Loading npm security reports…

@vibgrate/cli@2026.910.3: Malicious npm security report (Block) | LPM Firewall

registry / @vibgrate/cli / 2026.910.3

@vibgrate/cli@2026.910.3

vg — local codebase intelligence CLI + MCP server for AI coding agents: deterministic code graph, drift reporting, and version-correct library docs (Apache-2.0)

AI Security Review

scanned 27d ago · by lpm-firewall-ai

Running the installed CLI automatically retrieves the latest separate registry package, stores it under the user cache, and later imports its JavaScript. The fetched code is outside this reviewed package snapshot and is not version-pinned.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Any normal vg or vibgrate CLI invocation without --local or --offline.

Impact

A registry-controlled future @vibgrate/haile release can execute with the invoking user’s permissions.

Mechanism

Automatic remote module download followed by dynamic JavaScript import.

Attack narrative

After installation, a routine CLI invocation calls kickHaileReadiness. If the cache has no module, it retrieves the latest @vibgrate/haile package from the npm registry, extracts its dist files into the user cache, and records the chosen version. Later code dynamically imports the cached index.js. Because the package is fetched outside npm dependency resolution, has no pinned version, and runs automatically, a later registry release becomes executable code in the user context without an explicit module-install command.

AI rationale

The package contains a complete automatic remote-code acquisition and dynamic-execution path on normal CLI use. Integrity validation does not mitigate the unpinned trust in mutable registry metadata and tarball content.

Evidence

package.jsondist/cli.jsdist/chunk-YVLVZK4W.jsdist/chunk-REYXILOS.js~/.cache/vibgrate/modules/haile/index.js

Network endpoints1

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/chunk-EZ7UC5Y5.jsView file

3import * as path from 'path'; L4: import { execFileSync } from 'child_process'; L5:

High

Child Process

Package source references child process execution.

dist/chunk-EZ7UC5Y5.jsView on unpkg · L3

dist/interactive-UQSEBVRC.jsView file

729return (command) => { L730: const res = spawnSync(command, { cwd: root, shell: true, encoding: "utf8", timeout: 12e4, maxBuffer: 10 * 1024 * 1024 }); L731: const stdout = (res.stdout ?? "") + (res.stderr ? `

High

Shell

Package source references shell execution.

dist/interactive-UQSEBVRC.jsView on unpkg · L729

dist/fastembed-CXX7LSQ6.jsView file

19try { L20: const req = createRequire(path.join(hostDir, "package.json")); L21: return await import(pathToFileURL(req.resolve(spec)).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/fastembed-CXX7LSQ6.jsView on unpkg · L19

dist/chunk-REYXILOS.jsView file

11import { createHash } from 'crypto'; L12: import { spawnSync } from 'child_process'; L13: import { parse } from 'smol-toml'; L14: L15: var MAGIC = Buffer.from("VGSNAP1\0", "latin1"); L16: var crc322 = zlib.crc32 ?? jsCrc32; ... L298: function disabled() { L299: const v = process.env.VIBGRATE_NO_KERNEL; L300: return v === "1" || v === "true"; ... L302: function relevanceModuleDir() { L303: const base = process.env.XDG_CACHE_HOME || path8.join(os.homedir(), ".cache"); L304: return path8.join(base, "vibgrate", "modules", "relevance");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-REYXILOS.jsView on unpkg · L11

dist/cli.jsView file

44import { isRelevantChange } from './chunk-H53KDGTH.js'; L45: import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as p... L46: import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, loadConfig, prepareCompressedUpload, computeDriftS... ... L51: import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-NFUPH6WN.js'; L52: import { CliError, ExitCode, usageError, engineUnavailable, notFound } from './chunk-YYTT5YIN.js'; L53: import { resolveOne } from './chunk-J7LKEB2R.js'; ... L89: import { Command, CommanderError, Option } from

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L44

44Trigger-reachable chain: manifest.bin -> dist/cli.js L44: import { isRelevantChange } from './chunk-H53KDGTH.js'; L45: import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as p... L46: import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, loadConfig, prepareCompressedUpload, computeDriftS... ... L51: import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-NFUPH6WN.js'; L52: import { CliError, ExitCode, usageError, engineUnavailable, notFound } from './chunk-YYTT5YIN.js'; L53: import { resolveOne } from './chunk-J7LKEB2R.js'; ...

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L44

grammars/tree-sitter-go.wasmView file

•path = grammars/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

grammars/tree-sitter-go.wasmView on unpkg

dist/chunk-BOANUCAI.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-BOANUCAI.js#virtual:normalized:round1View on unpkg

dist/chunk-YVLVZK4W.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @vibgrate/cli@2026.909.1 matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.909.1 similarity = 0.650 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-YVLVZK4W.jsView on unpkg

Source & flagged code

16 flagged

package.jsonView file

Lines 30-70json

30 "types": "./dist/index.d.ts",

31 "import": "./dist/index.js"

32 }

33 },

34 "files": [

35 "dist",

36 "grammars",

37 "skills",

38 "scripts/postinstall.mjs",

39 "LICENSE",

40 "NOTICE",

41 "README.md",

42 "DOCS.md"

43 ],

44 "scripts": {

45 "build": "pnpm run bundle:grammars && tsup",

46 "bundle:grammars": "node scripts/bundle-grammars.mjs",

47 "stamp:pins": "node scripts/stamp-release-pins.mjs",

48 "check:pins": "node scripts/stamp-release-pins.mjs --check",

49 "demo:svg": "node scripts/gen-demo-svg.mjs",

50 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L50

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L50

51 "dev": "tsx src/cli.ts",

52 "lint": "eslint src",

53 "typecheck": "tsc --noEmit",

54 "test": "vitest run",

55 "bench:suite": "tsx bench/build-suite.bench.ts",

56 "bench:literal": "tsx bench/literal-search.bench.ts",

57 "bench:locate": "tsx bench/locate-quality.bench.ts",

58 "bench:semantic-ask": "tsx bench/semantic-ask.bench.ts",

59 "bench:lib-docs": "tsx bench/lib-docs-quality.bench.ts",

60 "bench:di": "tsx bench/di-quality.bench.ts",

61 "bench:layer-a": "pnpm run bench:locate && pnpm run bench:semantic-ask && pnpm run bench:lib-docs",

62 "bench:vgd": "tsx bench/vgd-runtime.bench.ts"

63 },

64 "keywords": [

65 "code-graph",

66 "codebase-intelligence",

67 "ast",

68 "tree-sitter",

69 "mcp",

70 "ai-agents",

dist/chunk-EZ7UC5Y5.jsView file

Lines 1-23javascript

1import { __esm } from './chunk-Z6ZWNWWR.js';

2import * as fs from 'fs';

3import * as path from 'path';

dist/interactive-UQSEBVRC.jsView file

Lines 709-739javascript

709 result.stopped === "finished" ? c.green(`\u2714 ${result.finalText}`) : result.stopped === "max-steps" ? c.yellow(`stopped at the step limit

dist/fastembed-CXX7LSQ6.jsView file

Lines 1-39javascript

1import './chunk-Z6ZWNWWR.js';

2import * as fs from 'fs';

3import * as https from 'https';

4import

dist/chunk-REYXILOS.jsView file

Lines 1-31javascript

1import { parseGraph, stableStringify, serializeGraph } from './chunk-O3LABX6I.js';

2import { VERSION } from './chunk-7QUYGIM2.js';

3import { globalGraphPathForRef, globalGraphPath, repositoryStoreDir } from './chunk-F4VMXLMV.js';

4import { detectGitRef } from './chunk-6XH7UYYR.js'

dist/cli.jsView file

44import { isRelevantChange } from './chunk-H53KDGTH.js'; L45: import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as p... L46: import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, loadConfig, prepareCompressedUpload, computeDriftS... ... L51: import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-NFUPH6WN.js'; L52: import { CliError, ExitCode, usageError, engineUnavailable, notFound } from './chunk-YYTT5YIN.js'; L53: import { resolveOne } from './chunk-J7LKEB2R.js'; ... L89: import { Command, CommanderError, Option } from

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L44

44Trigger-reachable chain: manifest.bin -> dist/cli.js L44: import { isRelevantChange } from './chunk-H53KDGTH.js'; L45: import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as p... L46: import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, loadConfig, prepareCompressedUpload, computeDriftS... ... L51: import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-NFUPH6WN.js'; L52: import { CliError, ExitCode, usageError, engineUnavailable, notFound } from './chunk-YYTT5YIN.js'; L53: import { resolveOne } from './chunk-J7LKEB2R.js'; ...

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L44

grammars/tree-sitter-go.wasmView file

•path = grammars/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

grammars/tree-sitter-go.wasmView on unpkg

dist/chunk-BOANUCAI.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-BOANUCAI.js#virtual:normalized:round1View on unpkg

dist/chunk-YVLVZK4W.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @vibgrate/cli@2026.909.1 matchedIdentity = npm:QHZpYmdyYXRlL2NsaQ:2026.909.1 similarity = 0.650 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-YVLVZK4W.jsView on unpkg