snyk@1.1307.0
snyk library and cli utility
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe install hook is the documented Snyk CLI binary wrapper: it fetches a checksum-pinned binary from Snyk hosts and does not rewrite agent control files or depend on another snyk release. The required dist paths are a NuGet package and a webpack zip module, which match that CLI rather than a hidden payload.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall runs wrapper_dist/bootstrap.js exec; the binary is executed later when the user runs the snyk bin.
Impact
The expected Snyk CLI binary is installed in the package directory. No unconsented agent-config mutation, credential theft, or self-dependency install chain was found.
Mechanism
The wrapper requests a versioned binary from downloads.snyk.io with a static.snyk.io backup, compares sha256, sets mode 755, and spawnSync runs that file with shell false.
AI rationale
The install hook is the documented Snyk CLI binary wrapper: it fetches a checksum-pinned binary from Snyk hosts and does not rewrite agent control files or depend on another snyk release. The required dist paths are a NuGet package and a webpack zip module, which match that CLI rather than a hidden payload.
Network endpoints2
downloads.snyk.io/clistatic.snyk.io/cli
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- postinstall runs node wrapper_dist/bootstrap.js exec, which downloads the versioned Snyk CLI binary into the package directory.
- Download URLs are fixed to https://downloads.snyk.io/cli and https://static.snyk.io/cli, and the file is kept only after a sha256 comparison, then chmod 755.
- dist/cli/nupkgs/nuget.frameworks.6.14.3.nupkg contains the printable NuGet.Frameworks package name, a bundled NuGet helper, not an install script.
- dist/cli/905.index.js is a webpack chunk whose first module is zip-entry code, not an install-time payload.
Evidence against
- Dependencies are @sentry/node and global-agent; there is no runtime dependency on the snyk package name.
- The downloaded binary is spawned only from the snyk bin or runtime fallback, with shell false, after the checksum gate.
- No AI-agent control-file writes, credential harvesting, or obfuscated eval payload appear on the install path.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEval
Source & flagged code
17 flaggedpackage.jsonView file
•dependencies registry_only=boolean,roarr
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = node wrapper_dist/bootstrap.js exec
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node wrapper_dist/bootstrap.js exec
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgwrapper_dist/common.jsView file
Findings
1 Critical6 High10 Medium7 Low
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processwrapper_dist/common.js
HighShellsrc/common.ts
HighSame File Env Network Executionwrapper_dist/common.js
HighShips High Entropy Blobdist/cli/nupkgs/nuget.frameworks.6.14.3.nupkg
HighSemantic Analysis Limiteddist/cli/905.index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirewrapper_dist/bootstrap.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/cli/4744c3448a2e72a05611f70de149729e.node
Affected versions and remediation
This report applies to snyk@1.1307.0.
See all versions of snyk for other recorded verdicts.
- Review the evidence and your use of snyk@1.1307.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.