Loading npm security reports…

icoa-cli@2.19.638: Manual Review npm security report (Allow) | LPM Firewall

registry / icoa-cli / 2.19.638

icoa-cli@2.19.638

⚠ Under review

ICOA CLI — AI-native competition runtime of the International Cyber Olympiad in AI: learn, practise, and compete in AI & cybersecurity from the terminal (AI4CTF · CTF4AI · CTF4EAI)

AI Security Review

scanned 11d ago · by lpm-firewall-ai

No confirmed attack surface was established. An obfuscated, user-interactive CTF command can execute entered commands and submit session statistics.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

A user enters the CTF command and supplies an input beginning with an exclamation mark.

Impact

User-entered commands may run in the local environment, but the inspected evidence does not establish an unconsented attack.

Mechanism

The command conditionally invokes a child-process execution API using derived interactive input; it also sends statistics through fetch.

AI rationale

The required clean decision needs citations for 17 distinct paths, but the output permits only eight citations. The inspected source includes obfuscated active code, so a clean publication cannot be supported within the required citation coverage.

Decision evidence

public snapshot

AI called this Manual Review at 93.0% confidence as Unknown with high false-positive risk.

AI review observations

The manifest exposes a CLI entry point and its inspected lifecycle script is Husky prepare.
An obfuscated CTF command conditionally imports child_process and executes a command derived from interactive input.
The same obfuscated command posts session statistics without an evident credential in the inspected send body.

Source & flagged code

24 flagged · loading source

dist/commands/gpufortask.jsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/commands/gpufortask.jsView on unpkg · L1

dist/repl.jsView file

1import{createInterface as o}from"node:readline";import{spawn as e,execSync as t}from"node:child_process";import chalk from"chalk";import{appendExitLog as n}from"./lib/exit-log.js";...

High

Child Process

Package source references child process execution.

dist/repl.jsView on unpkg · L1

1import{createInterface as o}from"node:readline";import{spawn as e,execSync as t}from"node:child_process";import chalk from"chalk";import{appendExitLog as n}from"./lib/exit-log.js";...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/repl.jsView on unpkg · L1

dist/lib/access.jsView file

1import{createHash as t}from"node:crypto";import{execSync as e}from"node:child_process";import{platform as n}from"node:os";import{getConfig as r,saveConfig as i,getIcoaDir as o,getI...

High

Shell

Package source references shell execution.

dist/lib/access.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/lib/access.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/access.jsView on unpkg

dist/commands/ctf4ai-demo.jsView file

1(function(b,f){const U=a0f,h=b();while(!![]){try{const j=parseInt(U(0x1bb))/(0x166+0x504+-0x669)*(parseInt(U(0x190))/(0x1ff*0x11+0x1b0f+0xc*-0x515))+-parseInt(U(0x13b))/(-0x18aa+-0...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/commands/ctf4ai-demo.jsView on unpkg · L1

1(function(b,f){const U=a0f,h=b();while(!![]){try{const j=parseInt(U(0x1bb))/(0x166+0x504+-0x669)*(parseInt(U(0x190))/(0x1ff*0x11+0x1b0f+0xc*-0x515))+-parseInt(U(0x13b))/(-0x18aa+-0...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/commands/ctf4ai-demo.jsView on unpkg · L1

dist/lib/exam-sandbox.jsView file

1import{mkdtempSync as t,mkdirSync as e,existsSync as o,appendFileSync as s,statSync as i}from"node:fs";import{execFileSync as n}from"node:child_process";import{tmpdir as r,homedir ...

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/lib/exam-sandbox.jsView on unpkg · L1

1Trigger-reachable chain: scripts.start -> dist/index.js -> dist/commands/aienv.js -> dist/lib/exam-sandbox.js L1: import{mkdtempSync as t,mkdirSync as e,existsSync as o,appendFileSync as s,statSync as i}from"node:fs";import{execFileSync as n}from"node:child_process";import{tmpdir as r,homedir ...

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/lib/exam-sandbox.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/lib/exam-sandbox.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/exam-sandbox.jsView on unpkg

dist/lib/tool-man.jsView file

1import chalk from"chalk";export const TOOL_DOCS=[{name:"file",cat:"Forensics",summary:"identify a file type (always step 1)",ex:[["file mystery","what is this really? (extension li...

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/lib/tool-man.jsView on unpkg · L1

dist/commands/aienv.jsView file

1import{execSync as o,spawn as n}from"node:child_process";import{existsSync as e,mkdtempSync as t,readFileSync as r,rmSync as s,writeFileSync as a}from"node:fs";import{homedir as i,...

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/commands/aienv.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/aienv.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/aienv.jsView on unpkg

dist/commands/gfssm.jsView file

1Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.js -> dist/commands/gfssm.js L1: import{execFile as e}from"node:child_process";import{mkdir as o,writeFile as n}from"node:fs/promises";import{homedir as t}from"node:os";import{join as r}from"node:path";import{crea...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/commands/gfssm.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/gfssm.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/gfssm.jsView on unpkg

dist/commands/battle.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commands/battle.js#virtual:string-array:round1View on unpkg

dist/commands/env.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/env.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/env.jsView on unpkg

dist/commands/ioailab.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/ioailab.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/ioailab.jsView on unpkg

dist/commands/teleload.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/teleload.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/teleload.jsView on unpkg

dist/commands/arena-eai.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/arena-eai.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/arena-eai.jsView on unpkg

dist/commands/duck.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/duck.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/duck.jsView on unpkg

dist/commands/shell.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/shell.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/shell.jsView on unpkg

dist/lib/open-file.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/lib/open-file.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/open-file.jsView on unpkg

dist/lib/sh-lab.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/lib/sh-lab.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/sh-lab.jsView on unpkg