snyk@1.1308.3
snyk library and cli utility
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe lifecycle hook fetches the product’s CLI from Snyk-controlled hosts and verifies its hash before use. The flagged binary, archive, proxy, and bundled-code indicators align with the CLI and its dependencies; the inspected source did not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation triggers the postinstall bootstrap; invoking the CLI launches the downloaded executable or bundled fallback.
Impact
No concrete harmful effect was established from the inspected behavior.
Mechanism
The wrapper selects a Snyk CLI binary, downloads it from Snyk-hosted URLs when needed, verifies its SHA-256, and launches it. Error reporting uses Sentry when wrapper errors occur.
AI rationale
The lifecycle hook fetches the product’s CLI from Snyk-controlled hosts and verifies its hash before use. The flagged binary, archive, proxy, and bundled-code indicators align with the CLI and its dependencies; the inspected source did not establish malicious behavior.
Evidence
wrapper_dist/bootstrap.jswrapper_dist/common.jswrapper_dist/index.js
Network endpoints3
downloads.snyk.io/clistatic.snyk.io/clio30291.ingest.sentry.io/4504599528079360
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall runs the wrapper bootstrap, which downloads the CLI from Snyk-hosted endpoints and checks it against the packaged SHA-256 value.
- The launcher downloads a missing executable and invokes it with shell execution disabled; proxy support comes from the declared global-agent dependency.
- The inspected Sentry dependency and bundled CLI chunks are consistent with the package’s CLI and error-reporting functions; no concrete attack behavior was identified.
Evidence against
- Static hints flag binaries, archives, dynamic loading, and network APIs, but those indicators alone do not establish malicious behavior.
- The wrapper’s error reporter sends captured errors to a Sentry endpoint by default; the inspected source ties this to error reporting, not unrelated installation tracking.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
17 flaggedpackage.jsonView file
•dependencies registry_only=boolean,roarr
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = node wrapper_dist/bootstrap.js exec
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node wrapper_dist/bootstrap.js exec
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgwrapper_dist/common.jsView file
Findings
1 Critical6 High10 Medium7 Low
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processwrapper_dist/common.js
HighShellwrapper_dist/common.js
HighSame File Env Network Executionwrapper_dist/common.js
HighShips High Entropy Blobdist/cli/nupkgs/nuget.frameworks.6.14.3.nupkg
HighSemantic Analysis Limiteddist/cli/905.index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirewrapper_dist/bootstrap.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/cli/4744c3448a2e72a05611f70de149729e.node
Affected versions and remediation
This report applies to snyk@1.1308.3.
See all versions of snyk for other recorded verdicts.
- Review the evidence and your use of snyk@1.1308.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.