emp-code@0.1.9
EMP CLI - coding agent with full-screen TUI (ink, clickable tool output, mouse, plan mode, markdown, vision) and 18 providers. Runs great on any light PC / weak CPU / old motherboard. Sessions, context, effort, web search, background tasks, revert.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has a concrete unverified remote-binary delivery path at install time and execution path at command invocation. That is unsafe and unresolved, but the available source does not prove malicious intent or a completed malicious action.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm installation triggers postinstall; running emp triggers the launcher fallback.
Impact
A changed release asset or overridden download URL can cause unreviewed native code to run.
Mechanism
Remote native payload download followed by local execution.
AI rationale
The package has a concrete unverified remote-binary delivery path at install time and execution path at command invocation. That is unsafe and unresolved, but the available source does not prove malicious intent or a completed malicious action.
Evidence
package.jsonscripts/postinstall.jsbin/emp.jsdist/emp-win.exedist/emp-macosdist/emp-linux
Network endpoints1
github.com/saintdevzz/emp-cli/releases/latest/download/
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The install lifecycle automatically downloads a platform executable from a mutable GitHub latest-release URL.
- The downloaded bytes are written as an executable without a hash or signature check.
- Running the emp command can download the same remote executable and spawn it.
Evidence against
- The installer writes only the package's dist directory and does not modify agent configuration or unrelated project files.
- The inspected JavaScript does not harvest credentials or send local data elsewhere.
- The only hard-coded download host is the package repository's GitHub host.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/emp.jsView file
4const path = require('path');
L5: const { spawn } = require('child_process');
L6: const os = require('os');
High
16}
L17: console.error('emp binary not found. Run: npm install -g emp-code again, or download from https://github.com/saintdevzz/emp-cli/releases');
L18: process.exit(1);
...
L21: if (fs.existsSync(exePath)) {
L22: const child = spawn(exePath, process.argv.slice(2), { stdio: 'inherit' });
L23: child.on('close', code => process.exit(code == null ? 0 : code));
...
L25: } else {
L26: const url = process.env.EMP_EXE_URL || `https://github.com/saintdevzz/emp-cli/releases/latest/download/${exeName}`;
L27: console.log(`[emp] Downloading ${exeName}...`);
Findings
5 High7 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/emp.js
HighSame File Env Network Executionbin/emp.js
HighRemote System File Writebin/emp.js
HighPrevious Version Dangerous Deltabin/emp.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirebin/emp.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/emp-linux
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to emp-code@0.1.9.
See all versions of emp-code for other recorded verdicts.
- Review the evidence and your use of emp-code@0.1.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.