registry / @volcengine/ark-cli / 1.0.26

@volcengine/ark-cli@1.0.26

火山方舟 ARK 平台命令行工具

AI Security Review

scanned 26d ago · by lpm-firewall-ai

Installing the package automatically downloads and executes an opaque native binary. That binary is invoked to refresh and install skills into automatically detected agents.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during package installation

Impact

An unconsented install lifecycle can modify broad AI-agent control surfaces through code not present in the package snapshot.

Mechanism

downloaded binary execution followed by automatic agent skill installation

Attack narrative

The postinstall hook fetches a platform-specific native executable from manifest-controlled URLs, verifies its package-provided hash, saves it under bin/, and executes it. It then invokes +connect --refresh non-interactively; source comments state this downloads skills and installs them into automatically detected agents. This is an unconsented lifecycle mutation of a broad AI-agent control surface using opaque downloaded code.

AI rationale

The package performs automatic install-time network retrieval and execution of an opaque binary, then automatically installs agent skills. This creates a concrete unconsented AI-agent control-surface attack path.

Evidence

package.jsonscripts/postinstall.jsmanifest.jsonbin/arkcli-${platform}-${arch}${ext}skills/

Network endpoints2

lf3-static.bytednsdoc.com

@volcengine/ark-cli@1.0.26

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code