Loading npm security reports…

iobend@2.6.1: Suspicious npm security report (Warn) | LPM Firewall

registry / iobend / 2.6.1

iobend@2.6.1

Developer Environment Manager

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

An authenticated marketplace install can write server-provided content to a server-provided resolved path. The path is not constrained to the project or an extension directory.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

The user runs iobend install for a marketplace item while authenticated.

Impact

A compromised or malicious marketplace response can overwrite arbitrary user-writable files and potentially establish later code execution.

Mechanism

Unchecked remote path and content write

AI rationale

This is a concrete remote arbitrary-file-write supply-chain vulnerability in a user-invoked command, not an automatic install-time attack. The absence of lifecycle hooks and explicit trigger support a warning rather than a publish block.

Evidence

src/commands/install/index.jssrc/index.js

Network endpoints1

iobend.com/api/cli/install

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

The authenticated marketplace installer accepts remote file paths and writes supplied content without restricting the destination.

Source & flagged code

8 flagged · loading source

src/commands/dotfiles/index.jsView file

5L6: const DOTFILES_DIR = path.join(os.homedir(), '.iobend', 'dotfiles'); L7: const TARGET_FILES = ['.zshrc', '.bashrc', '.gitconfig', '.vimrc', '.tmux.conf']; L8:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/commands/dotfiles/index.jsView on unpkg · L5

src/commands/verify/index.jsView file

10const token = await getGlobalConfig('token'); L11: const apiBase = (await getGlobalConfig('apiUrl')) || 'https://iobend.com'; L12: ... L23: if (res.ok) { L24: const data = await res.json(); L25: if (data.success) {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/commands/verify/index.jsView on unpkg · L10

src/commands/scan/index.jsView file

4import path from 'path'; L5: import { execa } from 'execa'; L6: import { getGlobalConfig, loadLocalProject } from '../../utils/config.js'; ... L14: try { L15: const cwd = process.cwd(); L16: ... L42: for (const file of allFiles) { L43: if (file.endsWith('package.json')) { L44: try { L45: const pkg = JSON.parse(fs.readFileSync(file, 'utf8')); L46: const allDeps = { ...(pkg.dependencies || {}), ...(pkg.devDependencies || {}) }; ... L129: // Run npm audit --json. It exits with 1 if vulns are found, so reject: false is critical.

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

src/commands/scan/index.jsView on unpkg · L4

4Trigger-reachable credential exfiltration chain: scripts.start -> src/index.js -> src/commands/scan/index.js L4: import path from 'path'; L5: import { execa } from 'execa'; L6: import { getGlobalConfig, loadLocalProject } from '../../utils/config.js'; ... L14: try { L15: const cwd = process.cwd(); L16: ... L42: for (const file of allFiles) { L43: if (file.endsWith('package.json')) { L44: try { L45: const pkg = JSON.parse(fs.readFileSync(file, 'utf8')); L46: const allDeps = { ...(pkg.dependencies || {}), ...(pkg.devDependencies || {}) }; ... L129: // Run npm audit --json. It exits with 1 if vulns are found, so reject: false is critical.

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

src/commands/scan/index.jsView on unpkg · L4

src/commands/info/index.jsView file

11Trigger-reachable chain: scripts.start -> src/index.js -> src/commands/info/index.js L11: const token = await getGlobalConfig('token'); L12: const apiBase = (await getGlobalConfig('apiUrl')) || 'https://iobend.com'; L13: ... L19: if (res.ok) { L20: const data = await res.json(); L21: if (data.success) { ... L51: console.log(); L52: console.log(result.stdout); L53: } catch (error) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/commands/info/index.jsView on unpkg · L11

src/commands/completion/index.jsView file

10Trigger-reachable persistence chain: scripts.start -> src/index.js -> src/commands/completion/index.js L10: if (!shell || shell === 'bash') { L11: const userShell = process.env.SHELL || ''; L12: if (userShell.includes('zsh')) shell = 'zsh'; L13: else if (userShell.includes('fish')) shell = 'fish'; L14: else if (process.platform === 'win32' && !process.env.SHELL) shell = 'powershell'; L15: else shell = shell || 'bash'; ... L177: try { L178: const homeDir = os.homedir(); L179: let targetProfile = ''; ... L181: if (shell === 'zsh') { L182: targetProfile = path.join(homeDir, '.zshrc'); L183: } else if (shell === 'fish') {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

src/commands/completion/index.jsView on unpkg · L10

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

src/commands/deps/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = iobend@2.1.0 matchedIdentity = npm:aW9iZW5k:2.1.0 similarity = 0.825 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/commands/deps/index.jsView on unpkg

Source & flagged code

8 flagged

src/commands/dotfiles/index.jsView file

Lines 1-25javascript

1import fs from 'fs/promises';

2import path from 'path';

3import os from 'os';

4import { logger, isJsonMode, printJson } from '../../utils/logger.js';

5

6const DOTFILES_DIR = path.join(os.homedir(), '.iobend', 'dotfiles');

7const TARGET_FILES = ['.zshrc', '.bashrc', '.gitconfig', '.vimrc', '.tmux.conf'];

8

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/commands/dotfiles/index.jsView on unpkg · L5

9/**

10 * iobend dotfiles [action]

11 * Synchronizes and backs up personal shell dotfiles across developer machines.

12 */

13export async function dotfilesCommand(actionArg = 'sync', options = {}) {

14 try {

15 await fs.mkdir(DOTFILES_DIR, { recursive: true });

16 const homeDir = os.homedir();

17 const action = actionArg.toLowerCase().trim();

18

19 const results = [];

20

21 for (const fileName of TARGET_FILES) {

22 const sourcePath = path.join(homeDir, fileName);

23 const backupPath = path.join(DOTFILES_DIR, fileName);

24

25 try {

src/commands/verify/index.jsView file

Lines 1-30javascript

1import { logger } from '../../utils/logger.js';

2import { getGlobalConfig } from '../../utils/config.js';

3

4export async function verifyCommand(tool) {

5

src/commands/scan/index.jsView file

Lines 1-24javascript

1import chalk from 'chalk';

2import ora from 'ora';

3import fs from 'fs';

4import path from 'path';

src/commands/info/index.jsView file

Lines 1-31javascript

1import { getToolInfo } from '../../installers/index.js';

2import { logger } from '../../utils/logger.js';

3import { getGlobalConfig } from '../../utils/config.js';

4

5export async

src/commands/completion/index.jsView file

Lines 1-30javascript

1import fs from 'fs';

2import path from 'path';

3import os from 'os';

4import { logger, isJsonMode, printJson } from '../../utils/logger.js';

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

src/commands/deps/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = iobend@2.1.0 matchedIdentity = npm:aW9iZW5k:2.1.0 similarity = 0.825 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/commands/deps/index.jsView on unpkg