registry / @byteplus-iga-pages/cli / 1.1.16
@byteplus-iga-pages/cli@1.1.16
A CLI tool for BytePlus IGA Pages
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package manifest, executable wrapper, and relevant bundled code are consistent with a BytePlus deployment CLI. The flagged behaviors were not confirmed: I found no concrete external credential theft or concealed remote execution, while the observed credential storage and gateway configuration writes support the package's stated purpose.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI bundle runs when its executable is invoked; integration creation and login are user-invoked commands.
Impact
Expected CLI operations include sending telemetry and BytePlus API requests, storing login credentials, and updating .env.local when creating an AI Gateway integration.
Mechanism
The reviewed paths show telemetry setup, local credential storage, and AI Gateway configuration written to the project environment file. I found no concrete credential exfiltration or decoded remote payload execution in the inspected source.
AI rationale
The package manifest, executable wrapper, and relevant bundled code are consistent with a BytePlus deployment CLI. The flagged behaviors were not confirmed: I found no concrete external credential theft or concealed remote execution, while the observed credential storage and gateway configuration writes support the package's stated purpose.
Evidence
.env.local~/.byteplus-iga/auth.json
Network endpoints7
mcs.zijieapi.comsgali-mcs.byteoversea.comiam.byteplusapi.comopen.byteplusapi.comconsole.byteplus.comsf16-tcc-tos-sg.byteoversea.comsignin.byteplus.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies this as the BytePlus IGA Pages CLI and points to its bundled CLI entry point; it declares no lifecycle scripts.
- The executable wrapper only requires the CLI bundle.
- Telemetry is initialized with an explicit opt-out variable and filters sensitive parameter names.
- The AI Gateway integration command is described as creating or reusing a gateway and linking the project; related code writes gateway configuration to .env.local.
- Credential persistence writes to the CLI's auth file, consistent with login functionality.
Evidence against
- The static scanner flagged credential exfiltration and remote execution, but targeted searches found no OpenAI or Anthropic credential names, eval/new Function execution, or matching gateway endpoint in the bundle.
- The package includes an esbuild dependency with its ordinary platform-specific installer.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem
Source & flagged code
12 flaggeddist/functions-runtime.jsView file
11357exports1.execCommand = execCommand;
L11358: const child_process_1 = __webpack_require__("child_process");
L11359: function spawnCommand(command, opts = {}) {
High
Child Process
Package source references child process execution.
dist/functions-runtime.jsView on unpkg · L11357bin/bp-iga.jsView file
2L3: require('../dist/index.js');
L4:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/bp-iga.jsView on unpkg · L2dist/index.jsView file
4/*! For license information please see index.js.LICENSE.txt */
L5: const __rslib_import_meta_url__="u"<typeof document?new(require("url".replace("",""))).URL("file:"+__filename).href:document.currentScript&&document.currentScript.src||new URL("mai...
L6: `),e.push(this.signedHeaders()),e.push(this.hexEncodedBodyHash());let r=e.join("\n");return l("--------CanonicalString:\n%s",r),r}canonicalHeaders(){let e=[];Object.keys(this.reque...
L7: `)),this}stop(){return this.isEnabled&&(clearInterval(this.id),this.id=void 0,this.frameIndex=0,this.clear(),this.hideCursor&&o.show(this.stream),this.discardStdin&&process.stdin.i...
...
L154: → using pnpm@${e.versionRange} by default
L155: To use ${n}, add "packageManager": "${"pnpm@10.x"===n?"pnpm@10.27.0":"pnpm@9.14.4"}" to package.json`}if(e.vers
Findings
3 Critical8 High4 Medium4 Low
CriticalCredential Exfiltrationdist/index.js
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/functions-runtime.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
Affected versions and remediation
This report applies to @byteplus-iga-pages/cli@1.1.16.
See all versions of @byteplus-iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @byteplus-iga-pages/cli@1.1.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.