registry / iobend / 2.1.0

iobend@2.1.0

Developer Environment Manager

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Explicit `iobend mcp install <server>` can execute shell metacharacters supplied in the server argument. No install-time execution or automatic foreign AI-agent configuration mutation was found.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs `iobend mcp install <server>` with attacker-controlled input.

Impact

Local arbitrary command execution as the invoking user.

Mechanism

Unsanitized interpolation into a shell-enabled npm install command.

AI rationale

The package is not malicious by lifecycle behavior, but it contains a concrete command-injection vulnerability in an explicit CLI path. The scanner’s credential-exfiltration label overstates the scan command, which transmits only secret identifiers.

Evidence

package.jsonsrc/index.jssrc/commands/mcp/index.jssrc/utils/shell.jssrc/commands/scan/index.jssrc/commands/sync/index.js

Decision evidence

public snapshot

AI called this Suspicious at 95.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

src/commands/mcp/index.js interpolates user-controlled server into a shell command.

iobend@2.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code