registry / canvasxpress-cli / 72.5.0
canvasxpress-cli@72.5.0
Node program to run canvasXpress in the command line
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe manifest has no lifecycle scripts, and the flagged dynamic evaluation is part of CanvasXpress callback and serialization behavior. The CLI’s browser loading and file output are tied to user-invoked rendering; inspection found no concrete malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the canvasxpress command with a rendering command or input.
Impact
No confirmed attack surface was established from the inspected source.
Mechanism
The CLI loads the selected input in Playwright and invokes CanvasXpress rendering or export operations. The inspected dynamic evaluation supports serialized callback functions.
AI rationale
The manifest has no lifecycle scripts, and the flagged dynamic evaluation is part of CanvasXpress callback and serialization behavior. The CLI’s browser loading and file output are tied to user-invoked rendering; inspection found no concrete malicious behavior.
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares a command line binary and dependencies, with no lifecycle scripts in the inspected manifest.
- The CLI runs its package entrypoint and dispatches user-selected commands; its browser command loads the input URL supplied by the caller.
- The flagged bundle is the CanvasXpress library; its evaluation code handles serialized function callbacks.
- The inspected chalk, clear, and figlet dependency files expose terminal formatting, screen clearing, and figlet functionality.
- The CLI’s browser and file operations are part of its user-invoked rendering flow.
Evidence against
- The scanner’s dynamic evaluation and payload-loader signals correspond to minified CanvasXpress callback and serialization support; inspection found no separate hidden payload loader.
- The CLI can load caller-selected web input in Playwright, but no package-selected unrelated endpoint or automatic credential transfer was identified.
Behavioral surface
CryptoDynamicRequireEvalFilesystem
Source & flagged code
5 flaggedsrc/canvasXpress.jsView file
26*/
L27: (function(b,a){if(typeof exports==="object"){a(exports)}else{(a((b.CanvasXpress=b.CanvasXpress||{})))}}(this,(function(){var a=(typeof CanvasXpress==="function")?CanvasXpress:null;...
L28: exports['init'] = CanvasXpress;
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
src/canvasXpress.jsView on unpkg · L26•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/canvasXpress.jsView on unpkg26*/
L27: (function(b,a){if(typeof exports==="object"){a(exports)}else{(a((b.CanvasXpress=b.CanvasXpress||{})))}}(this,(function(){var a=(typeof CanvasXpress==="function")?CanvasXpress:null;...
L28: exports['init'] = CanvasXpress;
Low
Eval
Package source references a known benign dynamic code generation pattern.
src/canvasXpress.jsView on unpkg · L26Findings
2 High4 Medium6 Low
HighObfuscated Payload Loadersrc/canvasXpress.js
HighSemantic Analysis Limitedsrc/canvasXpress.js
MediumDynamic Requireindex.js
MediumNetwork
MediumShips Build Helper.github/scripts/triage_issue.py
MediumStructural Risk Force Deep Review
LowEvalsrc/canvasXpress.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to canvasxpress-cli@72.5.0.
See all versions of canvasxpress-cli for other recorded verdicts.
- Review the evidence and your use of canvasxpress-cli@72.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.