Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

meitu-designkit-cli@1.0.24: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 12 finding(s) warrant review before installing.

View on npm All versions

registry / meitu-designkit-cli / 1.0.24

meitu-designkit-cli@1.0.24

CLI for DesignKit Team Agent

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

User invocation of the designkit CLI loads an obfuscated runtime that can read environment configuration, use child-process APIs, and issue requests. No install-time execution or concrete malicious data flow was confirmed.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs designkit or imports dist/index.js.

Impact

Potential unreviewable outbound transmission or command execution during normal CLI use.

Mechanism

Obfuscated CLI runtime with environment-configured network requests.

AI rationale

No concrete malicious action was established, but the combination of pervasive obfuscation, configurable networking, and process capability leaves material unresolved runtime risk. Warn rather than block because activation is user-invoked and there is no lifecycle hook.

Evidence

package.jsonbin/designkit-cli.jsdist/index.jsREADME.en.mdREADME.md

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

dist/index.js is a 1.09 MB single-line obfuscated executable entrypoint.
Runtime reads DESIGNKIT_OPENCLAW_AK_URL, enabling a configurable external endpoint.

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

The obfuscated entrypoint makes JSON-bodied fetch requests and loads child_process.

Opaque code prevents verifying the destination and data flow of its network operations.

Evidence against

package.json has no preinstall, install, or postinstall hook.
The bin launcher only requires dist/index.js when the user invokes designkit.
README describes a networked task-management CLI with explicit auth and download commands.
No confirmed credential harvesting, destructive action, persistence, or foreign agent-config write was established.

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTrivial

Manifest

NoLicense

scanned 3 file(s), 1.04 MB of source

Source & flagged code

5 flagged · loading source

bin/designkit-cli.jsView file

2L3: require("../dist/index.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/designkit-cli.jsView on unpkg · L2

dist/index.jsView file

1'use strict';(function(_0x1d7e5f,_0x16196e){const _0x157d9f={_0x413782:0xa0f,_0x41a52a:0x3be,_0xbe6f72:0x7f1,_0x2af928:0xb48,_0xb340c4:0x1108,_0x1e5c51:0xd58,_0xe1fdf1:0xf86,_0x184...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1'use strict';(function(_0x1d7e5f,_0x16196e){const _0x157d9f={_0x413782:0xa0f,_0x41a52a:0x3be,_0xbe6f72:0x7f1,_0x2af928:0xb48,_0xb340c4:0x1108,_0x1e5c51:0xd58,_0xe1fdf1:0xf86,_0x184...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

1'use strict';(function(_0x1d7e5f,_0x16196e){const _0x157d9f={_0x413782:0xa0f,_0x41a52a:0x3be,_0xbe6f72:0x7f1,_0x2af928:0xb48,_0xb340c4:0x1108,_0x1e5c51:0xd58,_0xe1fdf1:0xf86,_0x184...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js L1: 'use strict';(function(_0x1d7e5f,_0x16196e){const _0x157d9f={_0x413782:0xa0f,_0x41a52a:0x3be,_0xbe6f72:0x7f1,_0x2af928:0xb48,_0xb340c4:0x1108,_0x1e5c51:0xd58,_0xe1fdf1:0xf86,_0x184...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L1

Findings

4 High4 Medium4 Low

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

HighObfuscated Payload Loaderdist/index.js

HighTrigger Reachable Command Output Exfiltrationdist/index.js

MediumDynamic Requirebin/designkit-cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License

Affected versions and remediation

This report applies to meitu-designkit-cli@1.0.24.

See version security history for other recorded verdicts.

Review the evidence and your use of meitu-designkit-cli@1.0.24 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-25 15:06:18.723Z (UTC).

78%Suspicious

AI assessment confidence

IntentUnknown

TypeUnknown

False-positive riskMedium

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

Maintainersmeitu.inc

Version1.0.24

Latest on npm1.0.71

PublishedAug 25, 2026

LicenseUNLICENSED

Dependencies2

Integrityverified

Package size380 KB

Files6

Runtime surface

package.json

Entrypointsmain → dist/index.jsbin → designkit

Runtimenode >=18.0.0

Artifact1.05 MB · 6 files1 signature(s)

Install lifecycleNo install hooks · other: build, build:beta, build:meitu-int, build:pre +8

Behavioral surface

DynamicRequireEnvironmentVarsFilesystemNetworkHighEntropyStringsMinifiedPossibleObfuscationTrivialNoLicense

LPM.dev Registry

© 2026 LPM

Source & flagged code

5 flagged

bin/designkit-cli.jsView file

Lines 1-4javascript

1#!/usr/bin/env node

2

3require("../dist/index.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/designkit-cli.jsView on unpkg · L2

4

dist/index.jsView file

1'use strict';(function(_0x1d7e5f,_0x16196e){const _0x157d9f={_0x413782:0xa0f,_0x41a52a:0x3be,_0xbe6f72:0x7f1,_0x2af928:0xb48,_0xb340c4:0x1108,_0x1e5c51:0xd58,_0xe1fdf1:0xf86,_0x184...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1'use strict';(function(_0x1d7e5f,_0x16196e){const _0x157d9f={_0x413782:0xa0f,_0x41a52a:0x3be,_0xbe6f72:0x7f1,_0x2af928:0xb48,_0xb340c4:0x1108,_0x1e5c51:0xd58,_0xe1fdf1:0xf86,_0x184...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

1'use strict';(function(_0x1d7e5f,_0x16196e){const _0x157d9f={_0x413782:0xa0f,_0x41a52a:0x3be,_0xbe6f72:0x7f1,_0x2af928:0xb48,_0xb340c4:0x1108,_0x1e5c51:0xd58,_0xe1fdf1:0xf86,_0x184...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js L1: 'use strict';(function(_0x1d7e5f,_0x16196e){const _0x157d9f={_0x413782:0xa0f,_0x41a52a:0x3be,_0xbe6f72:0x7f1,_0x2af928:0xb48,_0xb340c4:0x1108,_0x1e5c51:0xd58,_0xe1fdf1:0xf86,_0x184...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L1