@yhong91/vibetime@0.1.80
vibetime CLI — install AI-agent hooks (Claude Code, Codex, OpenCode, Pi, Cursor) and report activity to vibetime.
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe source supports a warning for explicit user-command agent configuration mutation, particularly upgrade refreshing all integrations. No npm installation hook, runtime self-dependency chain, or concrete malicious attack was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs vibetime install or vibetime upgrade.
Impact
Agent events can trigger subsequent activity reporting. This agent configuration capability warrants a warning, but it is not an unconsented npm lifecycle mutation.
Mechanism
The CLI merges reporting hooks into agent configuration files; upgrade invokes npm and calls installation with all targets enabled.
AI rationale
The source supports a warning for explicit user-command agent configuration mutation, particularly upgrade refreshing all integrations. No npm installation hook, runtime self-dependency chain, or concrete malicious attack was identified.
Evidence
bin/vibetime.mjs.claudesettings.json
Network endpoints2
121.196.224.82:3001registry.npmjs.org
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json has no npm install lifecycle hooks or runtime self-dependency.
- The Claude adapter targets agent settings.json and adds activity-reporting hooks.
- The explicit install command writes integration entries for selected or detected agents.
- The upgrade command installs the latest CLI through npm and then refreshes integrations for all supported targets.
- The API client uses a caller-supplied or saved Vibetime token and a configurable endpoint.
Evidence against
- No concrete malicious installation behavior was identified.
- The token command stores a credential explicitly supplied by the user; this does not establish credential theft.
- Cursor session authentication is sent to the fixed cursor.com dashboard endpoint.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcebin/vibetime.mjsView file
879// src/cli.ts
L880: import { spawn as spawn2, spawnSync } from "node:child_process";
L881: import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises";
High
2487// src/adapters/agy.ts
L2488: var execAsync = promisify(exec);
L2489: var cachedRpcConnections = null;
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/vibetime.mjs:
import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises";
await writeFile(filePath, content, "utf8");
import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises";
import { mkdir as mkdir2, readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8");
await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8");
const override = env?.CLAUDE_CONFIG_DIR;
return path7.join(home, ".claude");
Findings
4 High4 Medium4 Low
HighChild Processbin/vibetime.mjs
HighShellbin/vibetime.mjs
HighCredential Redirect Persistencebin/vibetime.mjs
HighRuntime Package Installbin/vibetime.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @yhong91/vibetime@0.1.80.
See all versions of @yhong91/vibetime for other recorded verdicts.
- Review the evidence and your use of @yhong91/vibetime@0.1.80 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.