snyk@1.1307.3
snyk library and cli utility
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe lifecycle hook is the documented Snyk CLI binary bootstrap: it fetches a version-pinned binary from Snyk hosts and rejects a checksum mismatch. The required CLI chunk and NuGet package are ordinary bundled assets, with no separate install-time attack chain.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall runs wrapper_dist/bootstrap.js with exec, and later user invocation of the snyk bin.
Impact
The install places the official CLI binary inside the package directory. No unconsented foreign control-surface write, secret theft, or hidden payload execution was established.
Mechanism
The wrapper selects a platform binary name, downloads it from downloads.snyk.io with static.snyk.io as backup, compares SHA-256, and then executes that local file.
AI rationale
The lifecycle hook is the documented Snyk CLI binary bootstrap: it fetches a version-pinned binary from Snyk hosts and rejects a checksum mismatch. The required CLI chunk and NuGet package are ordinary bundled assets, with no separate install-time attack chain.
Network endpoints2
downloads.snyk.io/clistatic.snyk.io/cli
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json sets bin to bin/snyk and postinstall to node wrapper_dist/bootstrap.js exec.
- bootstrap.js downloads the configured binary only when argv contains exec.
- Download URLs are versioned paths on downloads.snyk.io and static.snyk.io.
- The download is rejected unless the SHA-256 matches, then the file is renamed and marked executable.
- dist/cli/905.index.js is a webpack chunk that exports a zip reader, not an install hook.
- The bundled nuget.frameworks nupkg identifies itself as NuGet.Frameworks content.
Evidence against
- No dependency on the snyk package name and no preinstall or install script.
- Error reports go to Sentry only after a failure and only when analytics is not disabled.
- No writes to foreign AI-agent config or credential export to an unrelated host were found in the wrapper.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
17 flaggedpackage.jsonView file
•dependencies registry_only=boolean,roarr
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = node wrapper_dist/bootstrap.js exec
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node wrapper_dist/bootstrap.js exec
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgwrapper_dist/common.jsView file
Findings
1 Critical6 High10 Medium7 Low
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processwrapper_dist/common.js
HighShellwrapper_dist/common.js
HighSame File Env Network Executionwrapper_dist/common.js
HighShips High Entropy Blobdist/cli/nupkgs/nuget.frameworks.6.14.3.nupkg
HighSemantic Analysis Limiteddist/cli/905.index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirewrapper_dist/bootstrap.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/cli/4744c3448a2e72a05611f70de149729e.node
Affected versions and remediation
This report applies to snyk@1.1307.3.
See all versions of snyk for other recorded verdicts.
- Review the evidence and your use of snyk@1.1307.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.