@yhong91/vibetime@0.1.78
vibetime CLI — install AI-agent hooks (Claude Code, Codex, OpenCode, Pi, Cursor) and report activity to vibetime.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package is not malicious by the install-hook boundary because no npm lifecycle trigger exists. Its explicit hook installation and unencrypted fixed-endpoint bearer-token upload create a real unresolved credential and telemetry risk.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
The user runs vibetime install and an installed agent subsequently invokes vibetime hook, or the user runs a sync/backfill command.
Impact
A network observer or the fixed endpoint can receive the bearer token, machine details, and uploaded activity rollups.
Mechanism
Agent-hook activity collection and HTTP bearer-token upload.
AI rationale
The package is not malicious by the install-hook boundary because no npm lifecycle trigger exists. Its explicit hook installation and unencrypted fixed-endpoint bearer-token upload create a real unresolved credential and telemetry risk.
Evidence
bin/vibetime.mjs.codex/hooks.json.vibetime/config.json.vibetime/machine-id
Network endpoints1
121.196.224.82:3001/v3/agent/ingest
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The default API endpoint is an HTTP IP address, and saved or environment tokens are selected for it.
- Uploads send the bearer token plus machine identifiers and activity rollups to that endpoint.
- The explicit install command adds hooks for agent prompt, tool, permission, and completion events.
- The Codex adapter writes a hook configuration under the user's .codex directory.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- Agent configuration changes require an explicit vibetime install command.
- The runtime package update occurs only through the explicit upgrade command.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcebin/vibetime.mjsView file
885// src/cli.ts
L886: import { spawn as spawn2, spawnSync } from "node:child_process";
L887: import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises";
High
2490// src/adapters/agy.ts
L2491: var execAsync = promisify(exec);
L2492: var cachedRpcConnections = null;
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/vibetime.mjs:
import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises";
await writeFile(filePath, content, "utf8");
import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises";
import { mkdir as mkdir2, readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8");
await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8");
const override = env?.CLAUDE_CONFIG_DIR;
return path7.join(home, ".claude");
Findings
6 High3 Medium4 Low
HighChild Processbin/vibetime.mjs
HighShellbin/vibetime.mjs
HighCredential Redirect Persistencebin/vibetime.mjs
HighRuntime Package Installbin/vibetime.mjs
HighKnown Malware Source Similaritybin/vibetime.mjs
HighKnown Malware Source Fingerprint Signaturebin/vibetime.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @yhong91/vibetime@0.1.78.
See all versions of @yhong91/vibetime for other recorded verdicts.
- Review the evidence and your use of @yhong91/vibetime@0.1.78 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.