registry / @apilift/cli / 1.8.0
@apilift/cli@1.8.0
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe source does not substantiate the scanner’s credential-redirection or remote-code-execution findings: Apilift credentials are used by the configured service client, saved app credentials are encrypted locally, and the capture-server worker runs a fixed Windows helper. The package also has no install hook; its analytics endpoint and enablement are constrained by the service-provided identity.
Static reason
One or more suspicious static signals were detected.
Trigger
Normal CLI command execution; analytics requires an authenticated installation and service-enabled analytics identity.
Impact
No malicious impact identified in the reviewed source.
Mechanism
API requests use the configured Apilift service endpoint, saved credentials are encrypted locally, and the capture worker uses a fixed process-inspection script.
AI rationale
The source does not substantiate the scanner’s credential-redirection or remote-code-execution findings: Apilift credentials are used by the configured service client, saved app credentials are encrypted locally, and the capture-server worker runs a fixed Windows helper. The package also has no install hook; its analytics endpoint and enablement are constrained by the service-provided identity.
Network endpoints2
apilift.deveu.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes CLI binaries and build/test scripts; it declares no install lifecycle hook.
- The CLI defaults to https://apilift.dev and permits a user-configured APILIFT_URL for its service endpoint.
- The client sends its Apilift bearer token through the configured API client.
- Saved credential fields are encrypted with AES-256-GCM before database storage, with the encryption key kept in the vault.
- The flagged capture-server worker runs a fixed PowerShell process-inspection script; its dynamic worker source does not come from a remote response.
- Analytics is enabled only when the service identity enables it and specifies the expected PostHog host and project-key format.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsPossibleObfuscationTelemetry
Source & flagged code
5 flaggeddist/apilift.jsView file
82const {workerData}=require('node:worker_threads');
L83: const {spawn}=require('node:child_process');
L84: const state=new Int32Array(workerData.memory,0,4), value=new Float64Array(workerData.memory,16,1);
High
23784sourceCode = this.opts.code.process(sourceCode, sch);
L23785: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L23786: const validate2 = makeValidate(this, this.scope.get());
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/apilift.js:
script = `$ErrorActionPreference='Stop'; while ($null -ne ($line=[Console]::ReadLine())) { $parts=$line.Split('|'); try { $p=[System.Diagnostics.Process]::GetProcessById([int]$part...
external_exports.strictObject({ id, kind: external_exports.literal("replay"), effect, method: external_exports.enum(["GET", "HEAD", "OPTIONS", "POST", "PUT", "PATCH", "DELETE"]), u...
import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync as rmSync2, writeFileSync } from "node:fs";
writeFileSync(join(directory, "owner.json"), JSON.stringify(owner), { flag: "wx", mode: 384 });
transportDefinitionSchema = external_exports.s
Findings
1 Critical4 High3 Medium6 Low
CriticalRemote Response Code Executiondist/apilift-capture-server.js
HighChild Processdist/apilift.js
HighEvaldist/apilift.js
HighCredential Redirect Persistencedist/apilift.js
HighCross File Remote Execution Contextdist/apilift.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @apilift/cli@1.8.0.
See all versions of @apilift/cli for other recorded verdicts.
- Review the evidence and your use of @apilift/cli@1.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.