registry / @apilift/cli / 1.5.12
@apilift/cli@1.5.12
AI Security Review
scanned 10d ago · by lpm-firewall-aiSource inspection found no concrete attack behavior. The scanner’s dynamic-execution and credential-redirection signals correspond to a fixed process-check worker, service authentication to the Apilift API, and analytics constrained to a validated host and key.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI and companion binaries run when invoked by a user; no install-time trigger was found.
Impact
No malicious impact was established.
Mechanism
No attack mechanism was identified. The worker uses fixed process-check code, and analytics uses validated service-provided settings.
AI rationale
Source inspection found no concrete attack behavior. The scanner’s dynamic-execution and credential-redirection signals correspond to a fixed process-check worker, service authentication to the Apilift API, and analytics constrained to a validated host and key.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes four user-invoked command entrypoints and lists build and test scripts; no install lifecycle hook was found.
- The flagged worker evaluates fixed process-check code that queries Windows process start times.
- The stored installation token is used as a bearer token with the Apilift API, whose default host is the Apilift service.
- Analytics sends queued events only when service-provided settings enable it and the host and project key pass fixed checks.
- The native host checks its caller origin; the inspected audit, capture-server, keyring, pricing, and schema-validator sources show package-aligned runtime behavior.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsPossibleObfuscationTelemetryUrlStrings
Source & flagged code
5 flaggeddist/apilift.jsView file
76const {workerData}=require('node:worker_threads');
L77: const {spawn}=require('node:child_process');
L78: const state=new Int32Array(workerData.memory,0,4), value=new Float64Array(workerData.memory,16,1);
High
23778sourceCode = this.opts.code.process(sourceCode, sch);
L23779: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L23780: const validate2 = makeValidate(this, this.scope.get());
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/apilift.js:
script = `$ErrorActionPreference='Stop'; while ($null -ne ($line=[Console]::ReadLine())) { $parts=$line.Split('|'); try { $p=[System.Diagnostics.Process]::GetProcessById([int]$part...
import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync } from "node:fs";
writeFileSync(join(directory, "owner.json"), JSON.stringify(owner), { flag: "wx", mode: 384 });
transportDefinitionSchema = external_exports.strictObject({ title, description: requiredDescription, mode: external_exports.enum(["direct", "browser"]), baseUrl: requestUrlSchema.o...
if (v.mode === "direct" && !v.baseUrl)
ctx.addIssue({ cod
Findings
1 Critical4 High3 Medium6 Low
CriticalRemote Response Code Executiondist/apilift-capture-server.js
HighChild Processdist/apilift.js
HighEvaldist/apilift.js
HighCredential Redirect Persistencedist/apilift.js
HighCross File Remote Execution Contextdist/apilift.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @apilift/cli@1.5.12.
See all versions of @apilift/cli for other recorded verdicts.
- Review the evidence and your use of @apilift/cli@1.5.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.