@apso/cli@0.45.0
Apso CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged verification code uses DATABASE_URL for an explicit project smoke test, so that finding does not show credential exfiltration. However, default runtime telemetry sends error messages and exceptions that may include local paths or user-provided details beyond what the notice describes, warranting a warning.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A CLI command starts telemetry by default; failures can trigger error reporting unless telemetry is disabled.
Impact
Error details could reveal identifying information such as local paths to the package vendor’s analytics or monitoring services.
Mechanism
The CLI sends failure messages to PostHog and uncaught exceptions to Sentry, which may include local paths or user-provided details.
AI rationale
The flagged verification code uses DATABASE_URL for an explicit project smoke test, so that finding does not show credential exfiltration. However, default runtime telemetry sends error messages and exceptions that may include local paths or user-provided details beyond what the notice describes, warranting a warning.
Evidence
package.jsondist/hooks/init/telemetry.jsdist/lib/base-command.jsdist/lib/telemetry/telemetry.js~/.apso/config.json
Network endpoints2
us.i.posthog.como4509208616435714.ingest.us.sentry.io
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The CLI configures an init hook that starts telemetry for command invocations.
- On command failures, it reports the raw error message and sends uncaught exceptions with command context; these can contain local paths or user-provided details.
- Telemetry is sent to the package’s PostHog and Sentry services.
- A first-run notice describes basic usage telemetry and offers opt-outs, but does not disclose sending command error text or exception details.
- The flagged DATABASE_URL handling is part of an explicitly invoked smoke-test helper that reads project configuration and runs the project service.
Evidence against
- The notice says telemetry can be disabled through CLI configuration or environment variables.
- The telemetry description says it does not collect code, schemas, or file contents; no credential exfiltration was identified.
- The verification helper uses DATABASE_URL to test the project database rather than sending it to a collector.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
4 flaggeddist/lib/verify/index.jsView file
10const tslib_1 = require("tslib");
L11: const child_process_1 = require("child_process");
L12: const fs = tslib_1.__importStar(require("fs"));
L13: const http = tslib_1.__importStar(require("http"));
L14: const net = tslib_1.__importStar(require("net"));
...
L32: return new Promise((resolve) => {
L33: const p = (0, child_process_1.spawn)(cmd, args, { cwd, env: { ...process.env, ...env } });
L34: let output = "";
L35: p.stdout.on("data", (d) => {
L36: output += d;
...
L286: done(step(name, r));
L287: return r.ok ? JSON.parse(r.output.trim().split("\n").pop()) : undefined;
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/lib/verify/index.jsView on unpkg · L10bin/dev.cmdView file
•path = bin/dev.cmd
kind = build_helper
sizeBytes = 30
magicHex = [redacted]
Medium
dist/commands/dev.js
Findings
2 Critical5 Medium5 Low
CriticalCredential Exfiltrationdist/lib/verify/index.js
CriticalPrevious Version Dangerous Deltadist/commands/dev.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/dev.cmd
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @apso/cli@0.45.0.
See all versions of @apso/cli for other recorded verdicts.
- Review the evidence and your use of @apso/cli@0.45.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.