registry / Staged payload carrier / mobbdev / 1.5.16

mobbdev@1.5.16

Automated secure code remediation tool

AI Security Review

scanned 29d ago · by lpm-firewall-ai

Automatic download and extraction of an unchecked executable archive during installation is a concrete supply-chain risk. The fixed package-aligned source and absence of demonstrated execution or exfiltration do not establish malware intent.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall during package installation.

Impact

A compromised or substituted upstream release could place unverified executable content in the consumer installation.

Mechanism

The postinstall script fetches a fixed GitHub release archive and extracts the named binary into node_modules/.bin without verifying a checksum or signature.

AI rationale

Evidence

src/post_install/cx_install.mjssrc/post_install/binary.mjs

Network endpoints1

github.com/Checkmarx/ast-cli/releases/download/2.0.55/ast-cli_${target}

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package automatically runs a postinstall script.
The postinstall script selects a Checkmarx archive hosted on GitHub.
The installer downloads and extracts that archive into node_modules/.bin without an integrity check.

Evidence against

The download URL is a fixed Checkmarx release URL rather than an operator-configured endpoint.
Static inspection did not show the downloaded binary being executed by the postinstall script or evidence of credential collection.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 1.16 MB of source, external domains: api.mobb.ai, app.mobb.ai, app.vssps.visualstudio.com, ast.checkmarx.net, bitbucket.org, content.mobb.ai, dev.azure.com, developer.atlassian.com, docs.mobb.ai, docs.snyk.io, downloads.snyk.io, github.com, gitlab.com, http-intake.logs.datadoghq.com, iam.checkmarx.net, json.schemastore.org, mvnrepository.com, www.npmjs.com

Source & flagged code

15 flagged

package.jsonView file

Lines 1-31json

2 "name": "mobbdev",

3 "version": "1.5.16",

4 "description": "Automated secure code remediation tool",

5 "repository": "git+https://github.com/mobb-dev/bugsy.git",

6 "main": "dist/index.mjs",

7 "module": "dist/index.mjs",

8 "scripts": {

9 "clean": "rm -rf build",

10 "env": "dotenv -e ./.env",

11 "postinstall": "node ./src/post_install/cx_install.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L11

12 "build": "tsc && tsup-node --env.NODE_ENV production",

13 "build:dev": "tsup-node --env.NODE_ENV development",

14 "build:binary": "node ./scripts/build_binary.mjs",

15 "build:binary:all": "node ./scripts/build_binary.mjs --all",

16 "increment-version": "./scripts/increment-version.sh",

17 "test:unit:mcp": "vitest run __tests__/mcp/",

18 "test:unit:mcp:ci": "vitest run --bail=1 __tests__/mcp/",

19 "test:mcp:watch": "vitest watch __tests__/mcp/",

20 "test:mcp:verbose": "pnpm run build && NODE_ENV=test VERBOSE=true vitest run __tests__/mcp/",

21 "test:mcp:all": "pnpm run test:unit:mcp && pnpm run test:integration:mcp && pnpm run test:e2e:mcp",

22 "test:unit": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --exclude='**/__tests__/integration.test.ts' --exclude='**/__tests__/integration.mcp.test.ts' --exclude='**/__tests__/integration.baseline-commit.test.ts' --exclude='**/__tests__/mcp/**'",

23 "test:unit:ci": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --bail=1 --exclude='**/__tests__/integration.test.ts' --exclude='**/__tests__/integration.mcp.test.ts' --exclude='**/__tests__/integration.baseline-commit.test.ts' --exclude='**/__tests__/mcp/**'",

24 "test:integration": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --sequence.concurrent=false false __tests__/integration.test.ts",

25 "test:integration:ci": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --bail=1 --sequence.concurrent=false false __tests__/integration.test.ts",

26 "test:integration:baseline-commit": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --sequence.concurrent=false false __tests__/integration.baseline-commit.test.ts",

27 "test:integration:baseline-commit:proxy": "GIT_PROXY_HOST=http://tinyproxy:8888 HTTP_PROXY=http://localhost:8888 API_URL=http://app-api:8080/v1/graphql TOKEN=$(../../scripts/login_auth0.sh) vitest run --bail=1 --sequence.concurrent=false false __tests__/integration.baseline-commit.test.ts",

28 "test:integration:mcp": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --sequence.concurrent=false false __tests__/integration.mcp.test.ts",

29 "test:integration:mcp:ci": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest run --bail=1 --sequence.concurrent=false false __tests__/integration.mcp.test.ts",

30 "test:integration:watch": "GIT_PROXY_HOST=http://tinyproxy:8888 TOKEN=$(../../scripts/login_auth0.sh) vitest watch run __tests__/integration.test.ts",

31 "test": "pnpm run test:unit && pnpm run test:integration",

.envView file

4patternName = blocked_file severity = critical blockedFile = .env redactedSecretContext = secretLikeLines = 5 L4: GITLAB_API_TOKEN=<redacted:0 empty> L5: GITHUB_API_TOKEN=<redacted:0 empty> L6: ADO_TEST_ACCESS_TOKEN=<redacted:0 empty> L7: HASURA_ACCESS_KEY=<redacted:0 empty> L10: DD_RUM_TOKEN=<redacted:35 token-like>

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.envView on unpkg · L4

dist/index.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = mobbdev@1.5.17 matchedIdentity = npm:bW9iYmRldg:1.5.17 similarity = 0.714 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.mjsView on unpkg

13309// src/utils/computerName.ts L13310: import { execSync } from "child_process"; L13311: import os from "os";

High

Child Process

Package source references child process execution.

dist/index.mjsView on unpkg · L13309

20156// src/features/claude_code/daemon-check-shim.tmpl.js L20157: var daemon_check_shim_tmpl_default = "// Mobb daemon shim \u2014 checks if daemon is alive, spawns if dead.\n// Auto-generated by mobbdev CLI. Do not edit.\nvar fs = require('fs')\... L20158:

High

Shell

Package source references shell execution.

dist/index.mjsView on unpkg · L20156

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.mjs: fs2.writeFileSync(gitignorePath, updatedContent, "utf8"); appBaseUrl, return `${appBaseUrl}/organization/${organizationId}/project/${projectId}/report/${analysisId}/fix/${fixId}`; appBaseUrl, return `${appBaseUrl}/organization/${organizationId}/project/${projectId}/report/${analysisId}/issue/${issueId}`; appBaseUrl, appBaseUrl, appBaseUrl,

dist/hash_search/index.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/hash_search/index.mjsView on unpkg

dist/args/commands/upload_ai_blame.mjsView file

•matchType = token_shingles matchedPackage = mobbdev@1.5.18 matchedPath = dist/args/commands/upload_ai_blame.mjs matchedIdentity = npm:bW9iYmRldg:1.5.18 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/args/commands/upload_ai_blame.mjsView on unpkg

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./src/post_install/cx_install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

.envView file

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.envView on unpkg · L4

dist/index.mjsView file

Findings

2 Critical10 High4 Medium6 Low

CriticalCritical Secret.env

CriticalPrevious Version Dangerous Deltadist/index.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/index.mjs

HighShelldist/index.mjs

HighCredential Redirect Persistencedist/index.mjs

HighCommand Output Exfiltrationdist/index.mjs

HighObfuscated Payload Loaderdist/index.mjs

HighRuntime Package Installdist/index.mjs

HighSemantic Analysis Limiteddist/hash_search/index.mjs

HighKnown Malware Source Similaritydist/index.mjs

HighKnown Malware Source Similaritydist/args/commands/upload_ai_blame.mjs

Affected versions and remediation

This report applies to mobbdev@1.5.16.

See all versions of mobbdev for other recorded verdicts.

Review the evidence and your use of mobbdev@1.5.16 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-24 00:47:41.008Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.