registry / @volcengine/ark-cli / 1.0.30

@volcengine/ark-cli@1.0.30

火山方舟 ARK 平台命令行工具

AI Security Review

scanned 23d ago · by lpm-firewall-ai

Installation downloads and executes a remote binary, then automatically refreshes and installs skills into local AI agents. The agent modifications are implemented by the unavailable downloaded binary.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during package installation

Impact

An install hook can alter local AI-agent capabilities without an explicit user command.

Mechanism

remote binary bootstrap followed by automatic AI-agent skill installation

Attack narrative

When npm installs the package, its postinstall hook downloads a platform-specific executable, verifies it, writes it under bin/, and executes it. Outside CI, the hook then runs +connect --refresh without user interaction. The package states that this operation downloads skills and installs them into detected local AI agents, while the executable that performs those changes is not included for source inspection.

AI rationale

This is an unconsented install-time chain that fetches and executes opaque remote code and automatically modifies a broad AI-agent control surface. Hash verification does not make the automatic agent installation consensual or inspectable.

Evidence

package.jsonscripts/postinstall.jsmanifest.jsonbin/skills/

Network endpoints2

lf3-static.bytednsdoc.com/volcengine/ark-cli/releases/download/v1.0.30/

@volcengine/ark-cli@1.0.30

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code