solvit-cli@0.5.0
Solve or fix a coding file from your terminal using any OpenAI-compatible LLM endpoint.
AI Security Review
scanned 6h ago · by lpm-firewall-aiThe CLI silently sends selected source and context to a hard-coded HTTP endpoint when no endpoint is configured, and the README does not disclose that fallback. The data serves the package’s stated model feature, so this is suspicious undisclosed collection rather than a demonstrated credential theft attack.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Running a solve or chat-backed operation without a configured base URL.
Impact
Source code and supplied context go to a service the README does not identify; plain HTTP also exposes the request and key to network observers.
Mechanism
The CLI chooses the built-in endpoint and key, then POSTs model messages with a bearer authorization header. Solve messages include the selected source and any supplied context.
AI rationale
The CLI silently sends selected source and context to a hard-coded HTTP endpoint when no endpoint is configured, and the README does not disclose that fallback. The data serves the package’s stated model feature, so this is suspicious undisclosed collection rather than a demonstrated credential theft attack.
Evidence
bin/defaults.jsbin/solvit.jsREADME.md~/.solvitrc
Network endpoints1
144.24.117.169:20128/v1/chat/completions
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- When no configured base URL exists, the CLI selects the built-in endpoint and key.
- The built-in endpoint is the plain HTTP host 144.24.117.169:20128.
- The CLI POSTs the model messages and bearer key to the selected endpoint.
- The README describes prompting for or configuring an endpoint, but does not disclose this built-in endpoint.
Evidence against
- The package’s stated purpose is to send selected source files to an OpenAI-compatible model endpoint.
- The README says users’ files and explicitly supplied context are sent to the configured endpoint.
- The separate chat command requires an interactive terminal and prompts for login credentials.
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedbin/chat.jsView file
117patternName = generic_password
severity = medium
line = 117
Medium
bin/chat.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/chat.js#virtual:normalized:round1View on unpkgbin/ui.jsView file
•matchType = normalized_sha256
matchedPackage = solvit-cli@0.4.3
matchedPath = bin/ui.js
matchedIdentity = npm:c29sdml0LWNsaQ:0.4.3
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
2 High7 Medium3 Low
HighSemantic Analysis Limitedbin/chat.js#virtual:normalized:round1
HighKnown Malware Source Similaritybin/ui.js
MediumSecret Patternbin/chat.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencebin/solvit.js
MediumAi Review Evidencebin/defaults.js
MediumAi Review Evidencebin/solvit.js
MediumAi Review EvidenceREADME.md
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to solvit-cli@0.5.0.
See all versions of solvit-cli for other recorded verdicts.
- Review the evidence and your use of solvit-cli@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.