coda-cli@1.0.8
NodeJS命令行端 AI 辅助编程助手
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe launcher checks for a coda-cli update but installs the differently named code-agent package globally, including through a sudo command on non-Windows systems. This creates an unresolved package substitution risk, so the package warrants a warning rather than a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
Run a valid CLI command that exits successfully when the registry reports a newer coda-cli version.
Impact
The install could add or replace globally installed package code and its commands; on non-Windows systems it requires the user to enter a sudo password.
Mechanism
The launcher checks registry version metadata, then starts npm install -g code-agent in a detached terminal; on non-Windows systems it prefixes the command with sudo.
AI rationale
The launcher checks for a coda-cli update but installs the differently named code-agent package globally, including through a sudo command on non-Windows systems. This creates an unresolved package substitution risk, so the package warrants a warning rather than a publish block.
Evidence
package.jsonbin/index.js
Network endpoints1
registry.npmjs.org
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest identifies coda-cli@1.0.8 and maps the coda command to bin/index.js.
- The launcher checks registry version information for coda-cli against its installed version.
- When an update is available, the launcher starts a global npm install of code-agent; the non-Windows command uses sudo.
- The update path runs after a CLI child process exits successfully and launches through a detached shell in a terminal.
- The install target differs from the package whose registry version triggered the update.
Evidence against
- The manifest declares no install lifecycle hook; the update path is reached through CLI command handling.
- The installer is visibly launched in a terminal, and on non-Windows systems it requests a sudo password.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggedbin/index.jsView file
1(()=>{"use strict";var e={450(e,t,a){t.childProcess=void 0;const s=a(317);t.childProcess={runCmdLive:(e,t=process.cwd())=>new Promise(a=>{(0,s.spawn)(e,{cwd:t,stdio:"inherit",shell...
L2: //# sourceMappingURL=index.js.map
High
1(()=>{"use strict";var e={450(e,t,a){t.childProcess=void 0;const s=a(317);t.childProcess={runCmdLive:(e,t=process.cwd())=>new Promise(a=>{(0,s.spawn)(e,{cwd:t,stdio:"inherit",shell...
L2: //# sourceMappingURL=index.js.map
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/index.jsView on unpkg · L11"packageName":"coda-cli","name":"coda","commands":[{"command":"chat","description":"Coda-CLI开启本地AI编程对话","custom":false},{"command":"start server","description":"Cod
Medium
Ai Review Evidence
The manifest identifies coda-cli@1.0.8 and maps the coda command to bin/index.js.
bin/index.jsView on unpkg · L1Findings
3 High5 Medium4 Low
HighChild Processbin/index.js
HighSame File Env Network Executionbin/index.js
HighCommand Output Exfiltrationgenerator/chat/index.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencepackage.json
MediumAi Review Evidencebin/index.js
MediumAi Review Evidencebin/index.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to coda-cli@1.0.8.
See all versions of coda-cli for other recorded verdicts.
- Review the evidence and your use of coda-cli@1.0.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.