@beeos-ai/cli@1.2.8
BeeOS CLI — run AI agents from your desktop
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package has no npm install hook, but its shipped bootstrap installers send host-identifying telemetry by default, which warrants a warning under the telemetry rules. The package’s normal CLI entry point is separate from those installers.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs scripts/install.sh or scripts/install.ps1; each sends a startup event.
Impact
BeeOS receives a hostname-derived identifier and platform details during installation. No credential or project-data transfer was identified in this telemetry.
Mechanism
The installers include the machine hostname, architecture, Node version, event and status in a POST to BeeOS install telemetry. BEEOS_NO_TELEMETRY=1 opts out.
AI rationale
The package has no npm install hook, but its shipped bootstrap installers send host-identifying telemetry by default, which warrants a warning under the telemetry rules. The package’s normal CLI entry point is separate from those installers.
Evidence
scripts/install.shscripts/install.ps1
Network endpoints1
public-api.beeos.ai/api/v1/telemetry/install
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The shell installer sends install telemetry containing a hostname-derived host_hint and platform details.
- The PowerShell installer includes the computer name in its telemetry payload and posts to the install telemetry endpoint.
- The installer telemetry is sent by default; BEEOS_NO_TELEMETRY=1 disables it.
Evidence against
- package.json declares only prepublishOnly, which builds the package; it has no npm install lifecycle hook.
- The bin entry imports the CLI bundle when the beeos command runs; the flagged installer scripts are separate from that entry point.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @beeos-ai/cli@1.2.6
matchedIdentity = npm:QGJlZW9zLWFpL2NsaQ:1.2.6
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg5334import path2 from "path";
L5335: import { execFile } from "child_process";
L5336: import { promisify } from "util";
High
1726import { createHash } from "crypto";
L1727: function quotePowerShellLiteral(value) {
L1728: return `'${value.replace(/'/g, "''")}'`;
High
Findings
1 Critical5 High5 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Persistencedist/index.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
MediumShips Build Helperscripts/install.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @beeos-ai/cli@1.2.8.
See all versions of @beeos-ai/cli for other recorded verdicts.
- Review the evidence and your use of @beeos-ai/cli@1.2.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.