snyk@1.1306.0
snyk library and cli utility
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection shows install-time download and child process use, but both implement the advertised Snyk CLI bootstrap with Snyk-owned endpoints, platform mapping, and SHA-256 verification. No concrete malicious attack surface remains beyond expected CLI behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
npm install postinstall or user invoking bin/snyk
Impact
Installs and runs the Snyk CLI; no confirmed malicious behavior found
Mechanism
package-aligned CLI binary bootstrap and execution
AI rationale
Static inspection shows install-time download and child process use, but both implement the advertised Snyk CLI bootstrap with Snyk-owned endpoints, platform mapping, and SHA-256 verification. No concrete malicious attack surface remains beyond expected CLI behavior.
Evidence
package.jsonbin/snykwrapper_dist/bootstrap.jswrapper_dist/index.jswrapper_dist/common.jswrapper_dist/generated/sha256sums.txtwrapper_dist/generated/binary-deployments.jsonsrc/common.tswrapper_dist/generated/versionwrapper_dist/snyk-linuxwrapper_dist/snyk-linux-arm64wrapper_dist/snyk-macoswrapper_dist/snyk-macos-arm64wrapper_dist/snyk-alpinewrapper_dist/snyk-alpine-arm64wrapper_dist/snyk-win.exedist/cli/index.js
Network endpoints3
downloads.snyk.io/clistatic.snyk.io/cli3e845233db8c4f43b4c4b9245f1d7bd6@o30291.ingest.sentry.io/4504599528079360
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs postinstall: node wrapper_dist/bootstrap.js exec
- wrapper_dist/bootstrap.js downloads a platform CLI binary during postinstall
- wrapper_dist/common.js uses child_process.spawnSync for platform detection and running the selected CLI
- wrapper_dist/common.js reports wrapper errors to Sentry unless SNYK_DISABLE_ANALYTICS is set
Evidence against
- Download URLs are package-aligned: downloads.snyk.io/cli and static.snyk.io/cli
- wrapper_dist/generated/sha256sums.txt pins SHA-256 for each downloaded CLI binary
- bin/snyk only loads wrapper_dist/index.js, which runs the Snyk CLI or bundled legacy dist/cli/index.js
- File writes are limited to temporary download, rename, chmod, and cleanup under wrapper_dist
- No evidence of credential harvesting, destructive behavior, persistence, or AI-agent control-surface writes
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
11 flaggedpackage.jsonView file
•scripts.postinstall = node wrapper_dist/bootstrap.js exec
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node wrapper_dist/bootstrap.js exec
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgwrapper_dist/common.jsView file
14const fs = require("fs");
L15: const child_process_1 = require("child_process");
L16: const https = require("https");
High
Child Process
Package source references child process execution.
wrapper_dist/common.jsView on unpkg · L14Findings
5 High7 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processwrapper_dist/common.js
HighShellsrc/common.ts
HighSame File Env Network Executionwrapper_dist/common.js
HighOversized Source Filedist/cli/index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirewrapper_dist/bootstrap.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/cli/4744c3448a2e72a05611f70de149729e.node
MediumShips Wasm Moduledist/cli/sql-wasm.wasm
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to snyk@1.1306.0.
See all versions of snyk for other recorded verdicts.
- Review the evidence and your use of snyk@1.1306.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.