socket@1.8.2
CLI for Socket.dev
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe package manifest has no install lifecycle hook, and the flagged behaviors resolve to user-run CLI features or bundled tooling. The source review found no concrete attack chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command, such as a package-manager scan or Maven manifest analysis.
Impact
No confirmed malicious effect or unintended credential disclosure was found.
Mechanism
The CLI scans requested packages or invokes the selected build tool; bundled code generation supports terminal formatting and schema validation.
AI rationale
The package manifest has no install lifecycle hook, and the flagged behaviors resolve to user-run CLI features or bundled tooling. The source review found no concrete attack chain.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json exposes CLI binaries and lists development and build scripts; it defines no install lifecycle hook.
- bin/cli.js forwards supplied arguments to the local CLI; the Maven extension is attached by the Maven manifest path.
- The pnpm wrapper scans user-issued install, add, and dlx commands before launching pnpm.
- The registry bundle uses GitHub Actions-provided credentials to request an audience-scoped OIDC token.
- The flagged dynamic-code sites generate terminal capability functions and schema validators.
- Offline analysis identifies the flagged archive as a ZIP; the CLI loads it for Maven manifest processing.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsPossibleObfuscation
Source & flagged code
18 flaggedbin/cli.jsView file
19L20: const spawnPromise = spawn(
L21: constants.execPath,
High
external/blessed/lib/tput.jsView file
1152if (this.options.stringify && code.indexOf('return ') === 0) {
L1153: return new Function('', code)();
L1154: }
High
Eval
Package source references dynamic code evaluation.
external/blessed/lib/tput.jsView on unpkg · L1152bin/npm-cli.jsView file
4void (async () => {
L5: const Module = require('node:module')
L6: const path = require('node:path')
Medium
Findings
3 Critical9 High8 Medium6 Low
CriticalCredential Exfiltrationexternal/@socketsecurity/registry/external/libnpmpack.js
CriticalTrigger Reachable Dangerous Capabilitydist/vendor.js
CriticalPrevious Version Dangerous Deltadist/shadow-pnpm-bin2.js
HighChild Processbin/cli.js
HighShell
HighEvalexternal/blessed/lib/tput.js
HighCommand Output Exfiltrationdist/vendor.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/vendor.js
HighTrigger Reachable Persistencedist/cli.js
HighShips High Entropy Blobdist/manifest-scripts/maven-extension/coana-maven-extension.jar
Affected versions and remediation
This report applies to socket@1.8.2.
See all versions of socket for other recorded verdicts.
- Review the evidence and your use of socket@1.8.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.