registry / @beeos-ai/cli / 1.2.6
@beeos-ai/cli@1.2.6
BeeOS CLI — run AI agents from your desktop
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/index.jsView file
5287import path2 from "path";
L5288: import { execFile } from "child_process";
L5289: import { promisify } from "util";
High
1707import { createHash } from "crypto";
L1708: function quotePowerShellLiteral(value) {
L1709: return `'${value.replace(/'/g, "''")}'`;
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
await p.writeFile(path13, JSON.stringify(snapshot, null, 2) + "\n");
await p.writeFile(path13, JSON.stringify(state, null, 2) + "\n");
await p.writeFile(path13, raw);
await p.writeFile(path13, JSON.stringify(info, null, 2));
await p.writeFile(path13, token);
await p.writeFile(keyPath, JSON.stringify(stored, null, 2));
await p.writeFile(kpPath, JSON.stringify(stored, null, 2));
await p.writeFile(fpPath, fingerprint(id));
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
Findings
6 High5 Medium6 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Persistencedist/index.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
MediumShips Build Helperscripts/install.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
Low
Affected versions and remediation
This report applies to @beeos-ai/cli@1.2.6.
See all versions of @beeos-ai/cli for other recorded verdicts.
- Review the evidence and your use of @beeos-ai/cli@1.2.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.