@yikeai/cli@0.4.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@yikeai/cli@0.4.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/auth-DtfCnHAS.jsView file

1var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,i,o,s)=>{i... L2: `)?`

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/auth-DtfCnHAS.jsView on unpkg · L1

1var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,i,o,s)=>{i... L2: `)?` L3: `:``}`}catch{}return t.replace(/^(\s*(?:Authorization|Cookie|Set-Cookie)\s*:\s*).*$/gim,`$1<redacted>`).replace(je,He).replace(/(Bearer\s+)[^\s"']+/gi,`$1<redacted>`).replace(/((?:... L4: <html lang="zh-CN">

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/auth-DtfCnHAS.jsView on unpkg · L1

dist/cli.jsView file

1const e=require(`./auth-DtfCnHAS.js`);let t=require(`commander`);t=e.G(t);let n=require(`node:crypto`);n=e.G(n);let r=require(`node:fs`);r=e.G(r);let i=require(`node:os`);i=e.G(i);... L2: `)}function pt(e){if(!e||typeof e!=`string`)return e;try{return JSON.parse(e)}catch{return e}}function A(...e){return e.find(e=>e!=null&&e!==``)}function mt(e){if(e==null||e===``)r... ... L4: `)}catch{}},y=()=>{try{r.write(`MCP proxy failed. L5: `)}catch{}},b=()=>{_===void 0&&(_={kind:`factory`,reported:!1})},x=t=>(h||(g=t,h=(async()=>{v();let n,r=async e=>{try{await e()}catch(e){n===void 0&&(n=e)}};for(await u.catch(e=>{n... L6: `),i);let o=await new Promise((e,t)=>{let n=f.default.createInterface({input:r,output:i,terminal:!0}),a=!1,o=()=>r.removeListener(`error`,c),s=e=>{a||(a=!0,o(),n.close(),t(e)

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli.jsView on unpkg · L1

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: const e=require(`./auth-DtfCnHAS.js`);let t=require(`commander`);t=e.G(t);let n=require(`node:crypto`);n=e.G(n);let r=require(`node:fs`);r=e.G(r);let i=require(`node:os`);i=e.G(i);... `)}function pt(e){if(!e||typeof e!=`string`)return e;try{return JSON.parse(e)}catch{return e}}function A(...e){return e.find(e=>e!=null&&e!==``)}function mt(e){if(e==null||e===``)r... `))t&&j(t)}let r=Tt(t);t.wait?At(t.wait,{ai:r}):t.watch?At(t.watch,{ai:r}):kt(t)?At(t,{printJobId:!t.jobId,ai:r}):r&&Et(t);let i=Dt(t);if(!t.wait?.outputs?.length&&!t.watch?.output... `)}catch{}},b=()=>{_===void 0&&(_={kind:`factory`,reported:!1})},x=t=>(h||(g=t

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg