Loading npm security reports…

@yhong91/vibetime@0.1.75: Malicious npm security report (Block) | LPM Firewall

registry / @yhong91/vibetime / 0.1.75

@yhong91/vibetime@0.1.75

vibetime CLI — install AI-agent hooks (Claude Code, Codex, OpenCode, Pi, Cursor) and report activity to vibetime.

AI Security Review

scanned 27d ago · by lpm-firewall-ai

An explicit install can add broad AI-agent event hooks. Those hooks trigger background collection of local agent history and upload rollups with a persisted bearer token to a fixed HTTP IP address.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

The user runs vibetime install and then uses a configured AI agent.

Impact

Agent activity and a bearer token can be disclosed to the remote service.

Mechanism

Agent-hook persistence followed by background history upload to a fixed endpoint.

Attack narrative

The CLI is not invoked during npm installation, but its explicit install command can modify AI-agent hook settings. The resulting hooks run on prompts and tool events, start a background import over local agent histories, and POST rollups to a fixed HTTP IP. The remote resolver selects a saved or environment-provided bearer token and attaches it to those requests. Persisting the token and using a raw, unencrypted endpoint makes this a concrete credential and activity-exfiltration risk.

AI rationale

Source inspection confirms a broad agent-hook collection and upload path to a fixed HTTP IP with bearer authentication. The lack of an npm lifecycle hook reduces automatic-install risk but does not remove the concrete exfiltration behavior after setup.

Evidence

bin/vibetime.mjs.vibetime/config.json.vibetime/machine-id.claude/settings.json

Network endpoints2

121.196.224.82:3001

Source & flagged code

7 flagged · loading source

bin/vibetime.mjsView file

885// src/cli.ts L886: import { spawn as spawn2, spawnSync } from "node:child_process"; L887: import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

bin/vibetime.mjsView on unpkg · L885

2489// src/adapters/agy.ts L2490: var execAsync = promisify(exec); L2491: var cachedRpcConnections = null;

High

Shell

Package source references shell execution.

bin/vibetime.mjsView on unpkg · L2489

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. bin/vibetime.mjs: import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises"; await writeFile(filePath, content, "utf8"); import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises"; import { mkdir as mkdir2, readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises"; await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8"); await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8"); const override = env?.CLAUDE_CONFIG_DIR; return path7.join(home, ".claude");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

bin/vibetime.mjsView on unpkg

16717`); L16718: const result = spawnSync("npm", ["install", "-g", `${NPM_PACKAGE}@latest`], { L16719: stdio: "inherit" ... L16721: if (result.status !== 0) { L16722: write(ctx.stderr, "\nFailed to install update. Try manually: npm install -g @yhong91/vibetime@latest\n"); L16723: return 1;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/vibetime.mjsView on unpkg · L16717

•matchType = normalized_sha256 matchedPackage = @yhong91/vibetime@0.1.62 matchedPath = bin/vibetime.mjs matchedIdentity = npm:QHlob25nOTEvdmliZXRpbWU:0.1.62 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/vibetime.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = d7fa548b32f50881 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @yhong91/vibetime@0.1.62 matchedPath = bin/vibetime.mjs matchedIdentity = npm:QHlob25nOTEvdmliZXRpbWU:0.1.62 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/vibetime.mjsView on unpkg

125try { L126: const { DatabaseSync } = await import("node:sqlite"); L127: const db = new DatabaseSync(candidatePath, { readOnly: true });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/vibetime.mjsView on unpkg · L125

Source & flagged code

7 flagged

bin/vibetime.mjsView file

885// src/cli.ts L886: import { spawn as spawn2, spawnSync } from "node:child_process"; L887: import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

bin/vibetime.mjsView on unpkg · L885

2489// src/adapters/agy.ts L2490: var execAsync = promisify(exec); L2491: var cachedRpcConnections = null;

High

Shell

Package source references shell execution.

bin/vibetime.mjsView on unpkg · L2489

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. bin/vibetime.mjs: import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises"; await writeFile(filePath, content, "utf8"); import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises"; import { mkdir as mkdir2, readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises"; await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8"); await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8"); const override = env?.CLAUDE_CONFIG_DIR; return path7.join(home, ".claude");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

bin/vibetime.mjsView on unpkg

16717`); L16718: const result = spawnSync("npm", ["install", "-g", `${NPM_PACKAGE}@latest`], { L16719: stdio: "inherit" ... L16721: if (result.status !== 0) { L16722: write(ctx.stderr, "\nFailed to install update. Try manually: npm install -g @yhong91/vibetime@latest\n"); L16723: return 1;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/vibetime.mjsView on unpkg · L16717

•matchType = normalized_sha256 matchedPackage = @yhong91/vibetime@0.1.62 matchedPath = bin/vibetime.mjs matchedIdentity = npm:QHlob25nOTEvdmliZXRpbWU:0.1.62 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/vibetime.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = d7fa548b32f50881 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @yhong91/vibetime@0.1.62 matchedPath = bin/vibetime.mjs matchedIdentity = npm:QHlob25nOTEvdmliZXRpbWU:0.1.62 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/vibetime.mjsView on unpkg

125try { L126: const { DatabaseSync } = await import("node:sqlite"); L127: const db = new DatabaseSync(candidatePath, { readOnly: true });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/vibetime.mjsView on unpkg · L125