registry / @apilift/cli / 1.5.13
@apilift/cli@1.5.13
AI Security Review
scanned 10d ago · by lpm-firewall-aiSource inspection found no concrete attack behavior. The scanner’s dynamic-evaluation and credential-redirection hints do not match the inspected code: evaluation serves a local process check, and the analytics key and recipient are constrained by account configuration and a fixed host.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the CLI; analytics sends occur only when the linked account’s analytics setting is enabled.
Impact
No malicious effect was identified; the reviewed behavior supports process inspection and configured product analytics.
Mechanism
The worker runs a fixed local process-inspection script. Analytics sends scrubbed CLI events and a validated project key to the fixed EU analytics host.
AI rationale
Source inspection found no concrete attack behavior. The scanner’s dynamic-evaluation and credential-redirection hints do not match the inspected code: evaluation serves a local process check, and the analytics key and recipient are constrained by account configuration and a fixed host.
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes CLI entrypoints and lists build and test scripts, with no install lifecycle hook.
- The flagged dynamic worker checks a Windows process start time using a local PowerShell script.
- Analytics sends are gated by the linked account’s enabled setting and use the fixed EU PostHog host with a validated project key.
- Inspected entrypoints and dependency snapshots match native-host, audit, pricing, keyring, and JSON-schema functions; no concrete attack behavior was found.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsPossibleObfuscationTelemetryUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/apilift.jsView file
76const {workerData}=require('node:worker_threads');
L77: const {spawn}=require('node:child_process');
L78: const state=new Int32Array(workerData.memory,0,4), value=new Float64Array(workerData.memory,16,1);
High
23778sourceCode = this.opts.code.process(sourceCode, sch);
L23779: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L23780: const validate2 = makeValidate(this, this.scope.get());
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/apilift.js:
script = `$ErrorActionPreference='Stop'; while ($null -ne ($line=[Console]::ReadLine())) { $parts=$line.Split('|'); try { $p=[System.Diagnostics.Process]::GetProcessById([int]$part...
external_exports.strictObject({ id, kind: external_exports.literal("replay"), effect, method: external_exports.enum(["GET", "HEAD", "OPTIONS", "POST", "PUT", "PATCH", "DELETE"]), u...
import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync } from "node:fs";
writeFileSync(join(directory, "owner.json"), JSON.stringify(owner), { flag: "wx", mode: 384 });
transportDefinitionSchema = external_exports.strictObject
Findings
1 Critical4 High3 Medium6 Low
CriticalRemote Response Code Executiondist/apilift-capture-server.js
HighChild Processdist/apilift.js
HighEvaldist/apilift.js
HighCredential Redirect Persistencedist/apilift.js
HighCross File Remote Execution Contextdist/apilift.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @apilift/cli@1.5.13.
See all versions of @apilift/cli for other recorded verdicts.
- Review the evidence and your use of @apilift/cli@1.5.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.