Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

meitu-designkit-cli@1.0.35: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged as agent extension risk

Allowed by default with warning: install-time first-party agent extension setup was detected.

View on npm All versions Policy details

registry / meitu-designkit-cli / 1.0.35

meitu-designkit-cli@1.0.35

CLI for DesignKit Team Agent

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A user running the CLI reaches heavily obfuscated code with shell, network, local-file, and runtime upgrade capabilities. No install-time execution or confirmed theft was established.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the designkit command or its WorkBuddy connector.

Impact

Remote content handling and runtime updates cannot be fully audited from the published obfuscated entrypoint.

Mechanism

Obfuscated agent CLI that fetches content and can invoke system commands.

AI rationale

No concrete malicious or unconsented install-time behavior was confirmed. The opaque runtime updater and agent-connector capabilities leave a material unresolved risk.

Evidence

package.jsonbin/designkit-cli.jsdist/index.jsREADME.en.md

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

The published entrypoint is a 1.17 MB, single-line obfuscated program, preventing normal audit of its runtime behavior.
The CLI contains shell execution, network fetches, and code that writes fetched content to a local file.

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

The documentation describes a WorkBuddy connector that installs or upgrades the CLI at runtime.

Evidence against

package.json contains no preinstall, install, or postinstall lifecycle hook.
The executable is activated through the user-invoked designkit command.
The documented features are task submission, authentication, and downloading task outputs; no credential-harvesting path was confirmed.

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTrivial

Manifest

NoLicense

scanned 2 file(s), 1.12 MB of source

Source & flagged code

5 flagged · loading source

bin/designkit-cli.jsView file

2L3: require("../dist/index.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/designkit-cli.jsView on unpkg · L2

dist/index.jsView file

1'use strict';function _0x4b8721(_0xfbd2b3,_0x465e99,_0x36b378,_0x2b26a1){return _0x2b23(_0x36b378-0x38,_0x465e99);}(function(_0x23cab9,_0x6f2c3d){const _0xab3935={_0x3ca25e:0xa2a,_...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1'use strict';function _0x4b8721(_0xfbd2b3,_0x465e99,_0x36b378,_0x2b26a1){return _0x2b23(_0x36b378-0x38,_0x465e99);}(function(_0x23cab9,_0x6f2c3d){const _0xab3935={_0x3ca25e:0xa2a,_...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

1'use strict';function _0x4b8721(_0xfbd2b3,_0x465e99,_0x36b378,_0x2b26a1){return _0x2b23(_0x36b378-0x38,_0x465e99);}(function(_0x23cab9,_0x6f2c3d){const _0xab3935={_0x3ca25e:0xa2a,_...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js L1: 'use strict';function _0x4b8721(_0xfbd2b3,_0x465e99,_0x36b378,_0x2b26a1){return _0x2b23(_0x36b378-0x38,_0x465e99);}(function(_0x23cab9,_0x6f2c3d){const _0xab3935={_0x3ca25e:0xa2a,_...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L1

Findings

4 High4 Medium4 Low

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

HighObfuscated Payload Loaderdist/index.js

HighTrigger Reachable Command Output Exfiltrationdist/index.js

MediumDynamic Requirebin/designkit-cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License

Affected versions and remediation

This report applies to meitu-designkit-cli@1.0.35.

See version security history for other recorded verdicts.

Review the evidence and your use of meitu-designkit-cli@1.0.35 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-27 12:04:52.085Z (UTC).

78%Suspicious

AI assessment confidence

IntentUnknown

TypeAgent extension lifecycle risk

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

Maintainersmeitu.inc

Version1.0.35

Latest on npm1.0.71

PublishedAug 27, 2026

LicenseUNLICENSED

Dependencies2

Integrityverified

Package size406 KB

Files5

Runtime surface

package.json

Entrypointsmain → dist/index.jsbin → designkit

Runtimenode >=18.0.0

Artifact1.12 MB · 5 files1 signature(s)

Install lifecycleNo install hooks · other: build, build:beta, build:meitu-int, build:pre +8

Behavioral surface

DynamicRequireEnvironmentVarsFilesystemNetworkHighEntropyStringsMinifiedPossibleObfuscationTrivialNoLicense

LPM.dev Registry

© 2026 LPM

Source & flagged code

5 flagged

bin/designkit-cli.jsView file

Lines 1-4javascript

1#!/usr/bin/env node

2

3require("../dist/index.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/designkit-cli.jsView on unpkg · L2

4

dist/index.jsView file

1'use strict';function _0x4b8721(_0xfbd2b3,_0x465e99,_0x36b378,_0x2b26a1){return _0x2b23(_0x36b378-0x38,_0x465e99);}(function(_0x23cab9,_0x6f2c3d){const _0xab3935={_0x3ca25e:0xa2a,_...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1'use strict';function _0x4b8721(_0xfbd2b3,_0x465e99,_0x36b378,_0x2b26a1){return _0x2b23(_0x36b378-0x38,_0x465e99);}(function(_0x23cab9,_0x6f2c3d){const _0xab3935={_0x3ca25e:0xa2a,_...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

1'use strict';function _0x4b8721(_0xfbd2b3,_0x465e99,_0x36b378,_0x2b26a1){return _0x2b23(_0x36b378-0x38,_0x465e99);}(function(_0x23cab9,_0x6f2c3d){const _0xab3935={_0x3ca25e:0xa2a,_...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js L1: 'use strict';function _0x4b8721(_0xfbd2b3,_0x465e99,_0x36b378,_0x2b26a1){return _0x2b23(_0x36b378-0x38,_0x465e99);}(function(_0x23cab9,_0x6f2c3d){const _0xab3935={_0x3ca25e:0xa2a,_...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L1