registry / @apilift/cli / 1.5.8
@apilift/cli@1.5.8
AI Security Review
scanned 15d ago · by lpm-firewall-aiSource inspection found no install hook or concrete attack behavior. The flagged dynamic evaluation is used for a fixed local Windows process helper, and analytics is gated by validated service-provided settings and identity.
Static reason
One or more suspicious static signals were detected.
Trigger
The code runs when a user invokes an exposed CLI command or helper.
Impact
No confirmed malicious effect was established.
Mechanism
The reviewed network activity uses a validated service analytics identity, while the dynamic worker evaluates a fixed local process helper.
AI rationale
Source inspection found no install hook or concrete attack behavior. The flagged dynamic evaluation is used for a fixed local Windows process helper, and analytics is gated by validated service-provided settings and identity.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes four CLI entrypoints and has no install lifecycle hook.
- Analytics requires a valid installation identity and server-provided enablement, host, and project key; it refreshes identity through the configured Apilift API and sends filtered event batches to the returned host.
- The dynamic worker code is a local Windows process helper that receives a process ID; the capture server excerpt shows a fixed PowerShell helper rather than remote response code being executed.
- The auxiliary entrypoints and inspected dependencies match native-host origin checks, session auditing, keyring support, model pricing, and schema validation.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsPossibleObfuscationTelemetryUrlStrings
Source & flagged code
5 flaggeddist/apilift.jsView file
76const {workerData}=require('node:worker_threads');
L77: const {spawn}=require('node:child_process');
L78: const state=new Int32Array(workerData.memory,0,4), value=new Float64Array(workerData.memory,16,1);
High
23778sourceCode = this.opts.code.process(sourceCode, sch);
L23779: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L23780: const validate2 = makeValidate(this, this.scope.get());
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/apilift.js:
script = `$ErrorActionPreference='Stop'; while ($null -ne ($line=[Console]::ReadLine())) { $parts=$line.Split('|'); try { $p=[System.Diagnostics.Process]::GetProcessById([int]$part...
import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync } from "node:fs";
writeFileSync(join(directory, "owner.json"), JSON.stringify(owner), { flag: "wx", mode: 384 });
transportDefinitionSchema = external_exports.strictObject({ title, description: requiredDescription, mode: external_exports.enum(["direct", "browser"]), baseUrl: requestUrlSchema.o...
if (v.mode === "direct" && !v.baseUrl)
ctx.addIssue({ cod
Findings
1 Critical4 High3 Medium6 Low
CriticalRemote Response Code Executiondist/apilift-capture-server.js
HighChild Processdist/apilift.js
HighEvaldist/apilift.js
HighCredential Redirect Persistencedist/apilift.js
HighCross File Remote Execution Contextdist/apilift.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @apilift/cli@1.5.8.
See all versions of @apilift/cli for other recorded verdicts.
- Review the evidence and your use of @apilift/cli@1.5.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.