@zaip-ai/cli@7.4.0

Summary

@zaip-ai/cli@7.2.0 is a CLI package whose shipped files trigger keyword co-occurrence patterns (curl/wget/ping tokens, Buffer.from base64 decoding) without evidence of installer-side harm. The curl references in dist/services/codex-pre-tool-hook-template.test.js and dist/services/codex-pre-tool-policy-template.js appear inside test fixtures and policy templates that enumerate example command strings (including explicit placeholder hosts such as evil.test and example.com) used by a pre-tool hook/policy mechanism — the strings are policy data, not executed commands against those hosts. Buffer.from(..., 'base64').toString(...) usage in dist/services/global-codex-config.js and in a release-preparation script is ordinary base64 decoding of configuration/release data, with no eval, Function constructor, or dynamic code execution of the decoded bytes. The ping/POST/GET tokens in templates/.agents/tools/runtime/api-mcp-runtime.mjs come from an MCP runtime template describing HTTP method handling. No lifecycle scripts fetch remote code, no installer secret paths (~/.aws, ~/.ssh, ~/.npmrc, browser stores) are read, no hardcoded attacker C2 endpoint is bound to a network call, and no obfuscated destination is present.

Source: amazon-inspector (0e44ea3cafd9835a85d3305b6aa9ed2f5400546938c6430c19a30cbdc5398936)