codebolt@1.12.93
CodeBolt headless server CLI
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest exposes a headless server CLI without an install hook, and the newly flagged manual-fetch script is guarded for direct CLI invocation and targets CodeBolt’s own manual service. The Unicode finding is in an encoding table, and the reviewed credential references are consistent with editor authentication behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; the manual helper runs only when directly invoked.
Impact
No unauthorized credential transfer, account action, or install-time behavior was identified.
Mechanism
The helper fetches the CodeBolt manual from its own service and uses a local cache.
AI rationale
The manifest exposes a headless server CLI without an install hook, and the newly flagged manual-fetch script is guarded for direct CLI invocation and targets CodeBolt’s own manual service. The Unicode finding is in an encoding table, and the reviewed credential references are consistent with editor authentication behavior.
Network endpoints2
mcp.codebolt.aigithub.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a headless server CLI and points to dist/index.js and bin/codebolt as its entry points.
- The only declared lifecycle script is prepublishOnly, which runs the package build; there is no install hook.
- The manual-fetch helper targets CodeBolt’s own manual service and runs its main function only when invoked directly as a CLI.
- The flagged invisible character appears within iconv-lite’s Mac Thai character encoding table.
Evidence against
- The package includes server and editor bundles with process, network, and dynamic-code functionality, consistent with its CLI and embedded editor purpose.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
9 flaggeddist/web/assets/serverWorkerMain-CPdrTHxh.jsView file
2patternName = generic_password
severity = medium
line = 2
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/web/assets/serverWorkerMain-CPdrTHxh.jsView on unpkg · L21/*! For license information please see serverWorkerMain.js.LICENSE.txt */
L2: var serverExportVar;(()=>{var e={3608:(e,t,r)=>{"use strict";var n;function i(e){if("contents"in e)n="string"==typeof e.contents?JSON.parse(e.contents):e.contents;else if("fsPath"i...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/web/assets/serverWorkerMain-CPdrTHxh.jsView on unpkg · L1dist/630.index.jsView file
2992try {
L2993: return !!exec();
L2994: } catch (e) {
High
Findings
2 Critical3 High7 Medium8 Low
CriticalTrojan Source Unicodedist/web/assets/iconv-lite-umd-DpoLQuPU.js
CriticalPrevious Version Dangerous Deltadist/assets/capabilities/skill/codebolt-platform-knowledge/scripts/fetch-codebolt-manual.mjs
HighChild Processdist/630.index.js
HighCross File Remote Execution Contextdist/web/assets/htmlServerMain-BEIBCfWH.js
HighSemantic Analysis Limiteddist/web/assets/MonacoTabsEditor-r-kfDOCP.js
MediumSecret Patterndist/web/assets/serverWorkerMain-CPdrTHxh.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/web/assets/onig-Du5pRr7Y.wasm
MediumOversized Source Filedist/web/assets/htmlServerMain-BEIBCfWH.js
Medium
Affected versions and remediation
This report applies to codebolt@1.12.93.
See all versions of codebolt for other recorded verdicts.
- Review the evidence and your use of codebolt@1.12.93 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.