@apso/cli@0.43.3
Apso CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged process execution and network calls support project verification and CLI operation. Runtime telemetry is disclosed with opt-out controls, and the inspected source does not show credential exfiltration or other malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
CLI invocation; telemetry hooks run before and after commands.
Impact
The source describes usage analytics and error reporting, with an opt-out; no malicious collection or account action was identified.
Mechanism
Telemetry sends command and runtime details and Apso account, workspace, and service identifiers to PostHog and Sentry. The verifier’s network requests target the project service or configured database.
AI rationale
The flagged process execution and network calls support project verification and CLI operation. Runtime telemetry is disclosed with opt-out controls, and the inspected source does not show credential exfiltration or other malicious behavior.
Network endpoints3
us.i.posthog.como4509208616435714.ingest.us.sentry.io127.0.0.1 (local smoke-test server)
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package has no install, preinstall, or postinstall hook; its init and postrun hooks are CLI telemetry hooks.
- Telemetry can be disabled with the documented config setting or environment variables.
- Telemetry sends CLI and runtime details plus Apso account, workspace, and service identifiers to the package’s PostHog and Sentry endpoints.
- The verifier’s smoke tests are invoked by CLI operations and exercise the project service and configured database.
Evidence against
- The package metadata identifies it as the Apso CLI and points to its project repository.
- The main entry point exports the oclif runner without other top-level behavior.
- The telemetry notice says no email, code, schema, or file contents are collected.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetry
Source & flagged code
5 flaggeddist/lib/upgrade.jsView file
12const tslib_1 = require("tslib");
L13: const child_process_1 = require("child_process");
L14: const inquirer_1 = tslib_1.__importDefault(require("inquirer"));
High
Child Process
Package source references child process execution.
dist/lib/upgrade.jsView on unpkg · L12dist/lib/verify/index.jsView file
10const tslib_1 = require("tslib");
L11: const child_process_1 = require("child_process");
L12: const fs = tslib_1.__importStar(require("fs"));
L13: const http = tslib_1.__importStar(require("http"));
L14: const net = tslib_1.__importStar(require("net"));
...
L27: return new Promise((resolve) => {
L28: const p = (0, child_process_1.spawn)(cmd, args, { cwd, env: { ...process.env, ...env } });
L29: let output = "";
L30: p.stdout.on("data", (d) => {
L31: output += d;
...
L230: });
L231: res.on("end", () => { var _a; return resolve({ status: (_a = res.statusCode) !== null && _a !== void 0 ? _a : 0, body: text }); });
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/lib/verify/index.jsView on unpkg · L10Findings
2 Critical3 High4 Medium5 Low
CriticalCredential Exfiltrationdist/lib/verify/index.js
CriticalPrevious Version Dangerous Deltadist/commands/dev.js
HighChild Processdist/lib/upgrade.js
HighShell
HighSame File Env Network Executiondist/lib/verify/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/dev.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @apso/cli@0.43.3.
See all versions of @apso/cli for other recorded verdicts.
- Review the evidence and your use of @apso/cli@0.43.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.