registry / mano-coding / 0.1.56
mano-coding@0.1.56
Mano Coding CLI and toolchain
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package presents a CLI and toolchain, has no install lifecycle hooks, and its NPM credential resolution restricts credentials to requests for the matching host. The scanner’s execution and network indicators fit the CLI’s functionality; the flagged unrelated hostnames appear in comments.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; the package declares no install lifecycle hooks.
Impact
No malicious or suspicious impact was established from the inspected flows.
Mechanism
The flagged environment, network, and process capabilities appear in CLI/toolchain behavior; NPM authorization is matched to the request host.
AI rationale
The package presents a CLI and toolchain, has no install lifecycle hooks, and its NPM credential resolution restricts credentials to requests for the matching host. The scanner’s execution and network indicators fit the CLI’s functionality; the flagged unrelated hostnames appear in comments.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes mano-coding as a CLI and toolchain and points to its CLI entry point.
- There are no preinstall, install, or postinstall hooks; the listed scripts are build, test, lint, and release tasks.
- NPM auth values are selected only when the configured credential host matches the request host.
- The bundled CLI invokes its command runner with process.argv, so network and command actions are driven by CLI commands.
Evidence against
- The bundle includes filesystem, network, and process-spawning capabilities, which are expected for a coding CLI and toolchain.
- The scanner’s foreign-host credential matches are not evidence of credential exfiltration: the NPM auth logic checks host alignment, and the cited unrelated hostnames occur in source comments.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
7 flaggeddist/bin.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = mano-coding@0.1.47
matchedIdentity = npm:bWFuby1jb2Rpbmc:0.1.47
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bin.jsView on unpkg1159var EventEmitter = __require("node:events").EventEmitter;
L1160: var childProcess = __require("node:child_process");
L1161: var path3 = __require("node:path");
High
1999}
L2000: const execArgv = process4.execArgv ?? [];
L2001: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
High
71552init_self_upgrade_pipeline();
L71553: DEFAULT_NPM_REGISTRY2 = "https://registry.npmjs.org";
L71554: }
...
L71557: // packages/cli/src/commands/auto-update.ts
L71558: import { spawn as spawn6 } from "node:child_process";
L71559: import { homedir as homedir8 } from "node:os";
...
L71561: async function scheduleAutoUpdateWorker(argv, currentVersion, options) {
L71562: const disabled = argv.includes("--offline") || Boolean(process.env["AICODING_NO_UPDATE_CHECK"]) || Boolean(process.env["CI"]) || argv[2] === "self-upgrade" || argv[2] === "_self-up...
L71563: if (disabled) return;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin.jsView on unpkg · L7155249* Constructs the CommanderError class
L50: * @param {number} exitCode suggested exit code which could be used with process.exit
L51: * @param {string} code an id string representing the error
...
L1159: var EventEmitter = __require("node:events").EventEmitter;
L1160: var childProcess = __require("node:child_process");
L1161: var path3 = __require("node:path");
...
L1209: this._outputConfiguration = {
L1210: writeOut: (str) => process4.stdout.write(str),
L1211: writeErr: (str) => process4.stderr.write(str),
...
L1248: * @returns {Command[]}
L1249: * @private
L1250: */
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin.jsView on unpkg · L4914130sourceCode = this.opts.code.process(sourceCode, sch);
L14131: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L14132: const validate = makeValidate(this, this.scope.get());
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/bin.jsView on unpkg · L14130bin/mano-coding.jsView file
6if (existsSync(fileURLToPath(bundledBin))) {
L7: await import(bundledBin.href);
L8: } else {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/mano-coding.jsView on unpkg · L6Findings
1 Critical4 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/bin.js
HighChild Processdist/bin.js
HighShelldist/bin.js
HighSame File Env Network Executiondist/bin.js
HighCommand Output Exfiltrationdist/bin.js
MediumDynamic Requirebin/mano-coding.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEvaldist/bin.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to mano-coding@0.1.56.
See all versions of mano-coding for other recorded verdicts.
- Review the evidence and your use of mano-coding@0.1.56 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.