Loading npm security reports…

blun-king-cli@9.1.512: Malicious npm security report (Block) | LPM Firewall

registry / blun-king-cli / 9.1.512

blun-king-cli@9.1.512

BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Normal CLI startup checks for a release and defaults to installing it automatically. The install is global, enables npm lifecycle scripts, and can enter a nested chain because the package depends on itself at another release range.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Running blun or king without an existing configuration that disables automatic updates.

Impact

A registry-selected release can replace the global CLI and execute its install hooks without a per-update user confirmation.

Mechanism

automatic global self-update with lifecycle scripts enabled

Attack narrative

Installing this release establishes a self-dependency that can select another release with the same lifecycle hook. On an ordinary later CLI start, absent configuration defaults automatic updates on; the launcher invokes the updater, which performs a global npm installation with scripts enabled. That remote installation can run postinstall again and mutate dependency permissions. This makes the registry release chain an automatic executable update path rather than a user-confirmed update.

AI rationale

The automatic global updater, enabled lifecycle scripts, and runtime self-dependency form a concrete unconsented supply-chain execution path. The narrow permission-repair hook does not offset the broader chained update behavior.

Evidence

package.jsonbin/startup-preferences.cjsbin/launcher-runtime.jsbin/update-notice.jsscripts/fix-node-pty-perms.js

Network endpoints2

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-node-pty-perms.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/update-lease.jsView file

7const path = require('node:path'); L8: const { spawn } = require('node:child_process'); L9:

High

Child Process

Package source references child process execution.

bin/update-lease.jsView on unpkg · L7

telegram-plugin/dist/noise.mjsView file

166try { L167: new Function(""); L168: return true;

Low

Eval

Package source references a known benign dynamic code generation pattern.

telegram-plugin/dist/noise.mjsView on unpkg · L166

bin/cognitive-state-store.cjsView file

2L3: const crypto = require('node:crypto'); L4: const fs = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cognitive-state-store.cjsView on unpkg · L2

telegram-plugin/dist/bridge.mjsView file

4import { randomBytes } from "node:crypto"; L5: import { spawn } from "node:child_process"; L6: import { Readable, Writable } from "node:stream"; ... L11: import telegramApprovalRelay from "../bin/telegram-approval-relay.cjs"; L12: import privateConversationPolicy from "../bin/telegram-private-conversation-policy.cjs"; L13: import telegramTextChunkPolicy from "../bin/telegram-text-chunk-policy.cjs"; ... L303: if (file.file_path === void 0) return void 0; L304: const res = await fetch(`https://api.telegram.org/file/bot${token}/${file.file_path}`); L305: const buf = Buffer.from(await res.arrayBuffer()); L306: const ext = file.file_path.split(".").pop() ?? "jpg"; ... L311: } catch (err) { L312: process.stderr.write(`telegram channel: photo download failed: ${String(err)}\n`);

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

telegram-plugin/dist/bridge.mjsView on unpkg · L4

native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView file

•path = native/darwin/prebuilds/darwin-x64/darwin-modifiers.node kind = native_binary sizeBytes = 12776 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView on unpkg

standard-tools/language-guard/blun_language_guard.pyView file

•path = standard-tools/language-guard/blun_language_guard.py kind = build_helper sizeBytes = 30303 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

standard-tools/language-guard/blun_language_guard.pyView on unpkg

dist-web/vis/index.html.gzView file

•path = dist-web/vis/index.html.gz kind = high_entropy_blob sizeBytes = 125235 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist-web/vis/index.html.gzView on unpkg

•path = dist-web/vis/index.html.gz kind = compressed_blob sizeBytes = 125235 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist-web/vis/index.html.gzView on unpkg

blun.mjsView file

•path = blun.mjs kind = oversized_source_file sizeBytes = 21017058 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

blun.mjsView on unpkg

•path = blun.mjs kind = oversized_cli_entrypoint sizeBytes = 21017058 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

blun.mjsView on unpkg

agent-spine-plugin/scripts/release-check.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 13

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

agent-spine-plugin/scripts/release-check.jsView on unpkg

dist-web/assets/cytoscape.esm-nFXppDBa.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/client/assets/cytoscape.esm-D3_iZ_3b.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-web/assets/cytoscape.esm-nFXppDBa.jsView on unpkg

agent-spine-plugin/scripts/check-install.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = blun-king-cli@9.1.509 matchedIdentity = npm:Ymx1bi1raW5nLWNsaQ:9.1.509 similarity = 0.908 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

agent-spine-plugin/scripts/check-install.jsView on unpkg