registry / cache-swipper / 3.6.0

cache-swipper@3.6.0

Safe, transparent cache and build artifact cleanup for projects

AI Security Review

scanned 27d ago · by lpm-firewall-ai

Calling runOperation can delete all accessible top-level files and directories beneath the caller's current working directory. Deletion is remotely authorized by an external service.

Static reason

No blocking static signals were detected.

Trigger

A consumer imports the package and calls runOperation without a safe directory argument.

Impact

Irreversible loss of a consumer project's files and directories.

Mechanism

Remote-gated recursive deletion of the working directory contents.

Attack narrative

A caller invoking runOperation defaults to its current working directory. The package contacts a remote endpoint and, if allowed, enumerates every top-level entry and recursively force-deletes directories or unlinks files. It does not restrict targets to caches or build artifacts, so a normal project directory can be wiped. There is no install hook, but the exported destructive capability is concrete and remotely gated.

AI rationale

This is a remotely controlled, broad destructive operation disguised as cache cleanup. Its explicit invocation requirement reduces automatic exposure but does not make the behavior safe or package-aligned.

Evidence

index.jspackage.jsonprocess.cwd()/*

Network endpoints1

testback-2aqe.onrender.com/can-cleanup

OSV advisory

OpenSSF/OSV

cache-swipper advertises itself as a safe cache and build-artifact cleanup utility, but the exported runOperation() function performs an unbounded recursive deletion of the caller's current working directory. On invocation the module makes an HTTPS request to the hardcoded endpoint https://testback-2aqe.onrender.com/can-cleanup and, if the remote response indicates the operation is allowed, iterates every entry under process.cwd() and calls fs.rmSync(target, {recursive:true, force:true}) on each one, excluding only index.js itself. No cache-specific paths, patterns, or allowlists are consulted. Identifiers are genericized (baseProcess, baseRemove, baseEntries, runOperation) and all console.log/console.error diagnostic output is commented out, so the destructive action produces no visible signal. The combination of a hardcoded remote kill-switch, indiscriminate recursive delete of the caller's working tree, and a misleading self-description gives the operator of testback-2aqe.onrender.com on-demand destructive control over any host that invokes this package.

cache-swipper@3.6.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code