@apso/cli@0.43.1
Apso CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged process execution is tied to explicit development and verification commands, and verifier requests target a local service or the project's configured database. Runtime telemetry is disclosed, limited to usage and Apso account/workspace context, and has documented opt-outs.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
CLI command startup enables telemetry unless disabled; project builds and smoke checks run only when the user invokes those commands.
Impact
No unauthorized credential collection, unrelated data transfer, or unrequested account action was identified.
Mechanism
Telemetry reports command and runtime details with Apso account/workspace IDs. Smoke checks start the configured service and send test requests to loopback; database checks use the configured DATABASE_URL.
AI rationale
The flagged process execution is tied to explicit development and verification commands, and verifier requests target a local service or the project's configured database. Runtime telemetry is disclosed, limited to usage and Apso account/workspace context, and has documented opt-outs.
Network endpoints4
us.i.posthog.como4509208616435714.ingest.us.sentry.io127.0.0.1Configured DATABASE_URL database host
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The flagged verifier runs from the explicit `apso test smoke` command.
- Smoke-test service requests target `127.0.0.1`; Python and Go checks use the configured `DATABASE_URL` host and port.
- The CLI discloses its runtime telemetry fields and provides command and environment opt-outs.
- Telemetry sends command usage and Apso account/workspace identifiers to the package's analytics and error-reporting services.
Evidence against
- The manifest configures CLI init/postrun hooks, not an npm install lifecycle hook.
- The verifier's process execution builds or starts the user's project as part of an explicit local verification command.
- No credential forwarding to an unrelated host or other concrete attack behavior was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetry
Source & flagged code
5 flaggeddist/lib/upgrade.jsView file
12const tslib_1 = require("tslib");
L13: const child_process_1 = require("child_process");
L14: const inquirer_1 = tslib_1.__importDefault(require("inquirer"));
High
Child Process
Package source references child process execution.
dist/lib/upgrade.jsView on unpkg · L12dist/lib/verify/index.jsView file
10const tslib_1 = require("tslib");
L11: const child_process_1 = require("child_process");
L12: const fs = tslib_1.__importStar(require("fs"));
L13: const http = tslib_1.__importStar(require("http"));
L14: const net = tslib_1.__importStar(require("net"));
...
L27: return new Promise((resolve) => {
L28: const p = (0, child_process_1.spawn)(cmd, args, { cwd, env: { ...process.env, ...env } });
L29: let output = "";
L30: p.stdout.on("data", (d) => {
L31: output += d;
...
L230: });
L231: res.on("end", () => { var _a; return resolve({ status: (_a = res.statusCode) !== null && _a !== void 0 ? _a : 0, body: text }); });
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/lib/verify/index.jsView on unpkg · L10Findings
2 Critical3 High4 Medium5 Low
CriticalCredential Exfiltrationdist/lib/verify/index.js
CriticalPrevious Version Dangerous Deltadist/commands/dev.js
HighChild Processdist/lib/upgrade.js
HighShell
HighSame File Env Network Executiondist/lib/verify/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/dev.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @apso/cli@0.43.1.
See all versions of @apso/cli for other recorded verdicts.
- Review the evidence and your use of @apso/cli@0.43.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.