@yhong91/vibetime@0.1.82
vibetime CLI — install AI-agent hooks (Claude Code, Codex, OpenCode, Pi, Cursor) and report activity to vibetime.
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe bundle sends a configured API token to a fixed IP endpoint over unencrypted HTTP by default, creating a concrete conditional credential exposure risk. The user-run CLI, explicit token configuration, and absence of an install hook do not establish a broader attack chain.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs an authenticated CLI command without configuring a different API URL.
Impact
The token may be exposed to the endpoint operator or intercepted in transit; the inspected source does not establish unrelated credential theft.
Mechanism
The client selects the default HTTP endpoint and includes the configured token in the Authorization bearer header on its requests.
AI rationale
The bundle sends a configured API token to a fixed IP endpoint over unencrypted HTTP by default, creating a concrete conditional credential exposure risk. The user-run CLI, explicit token configuration, and absence of an install hook do not establish a broader attack chain.
Evidence
bin/vibetime.mjs
Network endpoints1
121.196.224.82:3001
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes the bundle as a user-run CLI and declares no install lifecycle hook.
- The CLI’s default API URL is an IP address using unencrypted HTTP; an environment or stored URL can override it.
- The client attaches the saved API token as a bearer credential to requests sent to the selected API URL.
- The ingest command sends activity rollups to that URL, creating a conditional credential exposure risk.
- Agent integration files are written through the explicit install command.
- The updater invokes a global npm install only when the user runs the upgrade command.
Evidence against
- The token is explicitly set or supplied through CLI or environment configuration; the inspected code does not show harvesting of unrelated service credentials.
- The CLI supports a user-selected API URL, and its agent setup is user-invoked rather than an install hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
5 flagged · loading sourcebin/vibetime.mjsView file
879// src/cli.ts
L880: import { spawn as spawn2, spawnSync } from "node:child_process";
L881: import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises";
High
2487// src/adapters/agy.ts
L2488: var execAsync = promisify(exec);
L2489: var cachedRpcConnections = null;
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/vibetime.mjs:
import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises";
await writeFile(filePath, content, "utf8");
import { mkdir as mkdir6, open, rm, stat as stat17, writeFile as writeFile5 } from "node:fs/promises";
import { mkdir as mkdir2, readFile as readFile2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8");
await writeFile2(cacheFile, JSON.stringify(generatorMetadata, null, 2), "utf8");
const override = env?.CLAUDE_CONFIG_DIR;
return path7.join(home, ".claude");
Findings
4 High4 Medium4 Low
HighChild Processbin/vibetime.mjs
HighShellbin/vibetime.mjs
HighCredential Redirect Persistencebin/vibetime.mjs
HighRuntime Package Installbin/vibetime.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @yhong91/vibetime@0.1.82.
See all versions of @yhong91/vibetime for other recorded verdicts.
- Review the evidence and your use of @yhong91/vibetime@0.1.82 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.