devil-ai@0.14.0: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

devil-ai@0.14.0: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const{execSync}=require('child_process');try{execSync('devil-ai setup',{stdio:'inherit'})}catch(e){console.log('\\n ⚡ Devil AI installed! Run \\x1b[1mdevil-ai setup\\x1b[...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "const{execSync}=require('child_process');try{execSync('devil-ai setup',{stdio:'inherit'})}catch(e){console.log('\\n ⚡ Devil AI installed! Run \\x1b[1mdevil-ai setup\\x1b[...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/telegram.jsView file

1import { execSync, spawn } from "node:child_process"; L2: import { createServer } from "node:http";

High

Child Process

Package source references child process execution.

dist/telegram.jsView on unpkg · L1

dist/shell-env.jsView file

24return new Promise((resolve, reject) => { L25: const shell = process.platform === "win32" ? "cmd.exe" : "bash"; L26: const shellArgs = process.platform === "win32" ? ["/c", "echo %PATH%"] : ["-l", "-c", "echo $PATH"];

High

Shell

Package source references shell execution.

dist/shell-env.jsView on unpkg · L24

dist/opencode.jsView file

83try { L84: const { execSync } = await import("node:child_process"); L85: const whichCmd = process.platform === "win32" ? "where" : "which"; ... L93: stdio: "pipe", L94: env: { ...process.env, PATH: augmentedPath }, L95: }); L96: const url = `http://${hostname}:${port}`; L97: const server = { url, pid: proc.pid ?? null, managed: true };

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/opencode.jsView on unpkg · L83

dist/cli.jsView file

1import { execSync, spawn } from "node:child_process"; L2: import fs from "node:fs"; ... L23: function getDevilCodeConfigPath() { L24: const platform = process.platform; L25: // Try DevilCode config path first, then fallback to OpenCode L26: if (platform === "win32") { L27: const devilcodePath = path.join(os.homedir(), "AppData", "Roaming", "devilcode", "devilcode.json"); L28: const opencodePath = path.join(os.homedir(), "AppData", "Roaming", "opencode", "opencode.json"); ... L48: try { L49: config = JSON.parse(fs.readFileSync(configPath, "utf-8")); L50: } ... L268: const proc = spawn(cmd, args, { stdio: "pipe", shell: true });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L1

Source & flagged code

6 flagged

package.jsonView file

Lines 1-41json

1{

2 "name": "devil-ai",

3 "version": "0.14.0",

4 "description": "Devil AI — AI-powered coding assistant. Install everything with: npm install -g devil-ai",

5 "license": "MIT",

6 "type": "module",

7 "main": "./dist/index.js",

8 "types": "./dist/index.d.ts",

9 "bin": {

10 "devil-ai": "./bin/devil-ai"

11 },

12 "files": [

13 "dist",

14 "bin"

15 ],

16 "scripts": {

17 "build": "tsc",

18 "dev": "tsc --watch",

19 "check-types": "tsc --noEmit",

20 "start": "node dist/cli.js",

21 "postinstall": "node -e \"const{execSync}=require('child_process');try{execSync('devil-ai setup',{stdio:'inherit'})}catch(e){console.log('\\\\n ⚡ Devil AI installed! Run \\\\x1b[1mdevil-ai setup\\\\x1b[0m to install dependencies.\\\\n')}\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L21

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

22 "prepublishOnly": "npm run build"

23 },

24 "dependencies": {

25 "commander": "^13.1.0",

26 "chalk": "^5.4.1"

27 },

28 "devDependencies": {

29 "@types/node": "^22.15.3",

30 "typescript": "^5.8.3"

31 },

32 "engines": {

33 "node": ">=18"

34 },

35 "keywords": [

36 "ai",

37 "coding-assistant",

38 "opencode",

39 "cli",

40 "devil-ai",

41 "setup"

dist/telegram.jsView file

Lines 1-21javascript

1import { execSync, spawn } from "node:child_process";

2import { createServer } from "node:http";

High

Child Process

Package source references child process execution.

dist/telegram.jsView on unpkg · L1

3import { createLogger } from "./logger.js";

4import

dist/shell-env.jsView file

Lines 4-44javascript

4let resolved = false;

5let resolvePromise = null;

6export function waitForEnv() {

7 if (resolved)

8 return

dist/opencode.jsView file

Lines 63-103javascript

63 if (attempt > 1) {

64 try {

65 nextPort = await findFreePort(hostname);

66 }

67 catch {

68

dist/cli.jsView file

Lines 1-21javascript

1import { execSync, spawn } from "node:child_process";

2import fs from "node:fs";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L1

3import os from "node:os";

4import