registry / linkshell-cli / 0.10.93
linkshell-cli@0.10.93
Follow, steer and approve the coding agents on your computer (Claude Code, Codex, Gemini, Copilot and more) from your phone
AI Security Review
scanned 4h ago · by lpm-firewall-aiThe install hook only fixes executable permissions on node-pty helpers. The flagged process execution and network activity supports explicit upgrade, account sign-in, and local agent integration; no malicious data flow or unauthorized action was found.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Install runs the permission-fixing hook; upgrade and sign-in run through explicit CLI commands; local Antigravity access occurs as part of its agent integration.
Impact
No unrelated data collection, concealed execution, or unauthorized account action was found in the reviewed paths.
Mechanism
The hook chmods node-pty helpers; upgrade checks the package registry and invokes npm or Homebrew; sign-in uses LinkShell account endpoints; Antigravity requests go to a loopback language server.
AI rationale
The install hook only fixes executable permissions on node-pty helpers. The flagged process execution and network activity supports explicit upgrade, account sign-in, and local agent integration; no malicious data flow or unauthorized action was found.
Evidence
scripts/postinstall.mjsnode-pty platform spawn-helper files~/.linkshell/auth.json
Network endpoints5
registry.npmjs.orgitool.techmkbeusztkzffnzjdwmqk.supabase.cogateway.itool.tech127.0.0.1
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook locates node-pty's platform helpers and changes their executable permissions.
- The upgrade command is registered as a user-run CLI command; it checks the npm registry and upgrades LinkShell through npm or Homebrew.
- Password sign-in is an explicit command flow, and the package documents its LinkShell gateway and token proxy as part of its account and remote-access features.
- Antigravity integration reads a local process token to call the running local language server.
Evidence against
- The package has a postinstall hook, but its code only adjusts node-pty helper permissions.
- Sign-in tokens pass through the LinkShell vendor proxy before direct Supabase fallback; the inspected flow is tied to user-initiated login or token refresh.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
21 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/host/src/ports.jsView file
1import { execFile } from "node:child_process";
L2: import { readlink } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/host/src/ports.jsView on unpkg · L1Findings
19 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/host/src/ports.js
HighShell
HighCommand Output Exfiltrationdist/cli/src/commands/upgrade.js
HighSandbox Evasion Gated Capabilitydist/cli/src/commands/upgrade.js
HighTrigger Reachable Command Output Exfiltrationdist/cli/src/commands/upgrade.js
HighSemantic Analysis Limiteddist/cli/src/commands/host.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/cli/src/commands/desktop.js
HighKnown Malware Source Similaritysrc/commands/desktop.ts
HighKnown Malware Source Similaritydist/host/src/drivers/acp/antigravity.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to linkshell-cli@0.10.93.
See all versions of linkshell-cli for other recorded verdicts.
- Review the evidence and your use of linkshell-cli@0.10.93 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.