@byteplus-iga-pages/cli@1.2.1
A CLI tool for BytePlus IGA Pages
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe source supports default-on runtime telemetry that includes CLI parameter values, which is suspicious under the package firewall rules. The flagged credential redirection and remote execution were not substantiated in the inspected flows.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A CLI command completes.
Impact
Command parameter values may reveal user or project details, so the undisclosed collection warrants warning.
Mechanism
The telemetry code serializes command parameters and posts an event to an MCS endpoint; an environment variable disables reporting.
AI rationale
The source supports default-on runtime telemetry that includes CLI parameter values, which is suspicious under the package firewall rules. The flagged credential redirection and remote execution were not substantiated in the inspected flows.
Evidence
dist/index.js
Network endpoints2
mcs.zijieapi.comsgali-mcs.byteoversea.com
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- At command completion, telemetry serializes CLI parameters and extra fields, filtering some values by sensitive parameter name.
- The telemetry reporter posts command events to mcs.zijieapi.com or sgali-mcs.byteoversea.com.
- Telemetry is enabled unless IGA_PAGES_TELEMETRY_DISABLED is set to 1; I found no README disclosure.
Evidence against
- The manifest has no install lifecycle scripts.
- The telemetry configuration marks accessKey, secretKey, and value as sensitive parameter names.
- The inspected gateway configuration write is part of an explicit integration flow; no credential theft or concealed remote execution was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
12 flaggeddist/functions-runtime.jsView file
2671"use strict";
L2672: const cp = __webpack_require__("child_process");
L2673: const parse = __webpack_require__("../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js");
High
Child Process
Package source references child process execution.
dist/functions-runtime.jsView on unpkg · L2671557Cross-file remote execution chain: dist/functions-runtime.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L557: const ansiStyles = __webpack_require__("../../node_modules/.pnpm/ansi-styles@4.3.0/node_modules/ansi-styles/index.js");
L558: const { stdout: stdoutColor, stderr: stderrColor } = __webpack_require__("../../node_modules/.pnpm/supports-color@7.2.0/node_modules/supports-color/index.js");
L559: const { stringReplaceAll, stringEncaseCRLFWithFirstIndex } = __webpack_require__("../../node_modules/.pnpm/chalk@4.1.2/node_modules/chalk/source/util.js");
...
L767: const bracket = '{' === c[1];
L768: if (u && !bracket && 5 === c.length || 'x' === c[0] && 3 === c.length) return String.fromCharCode(parseInt(c.slice(1), 16));
L769: if (u && bracket) return S
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/functions-runtime.jsView on unpkg · L557Findings
3 Critical8 High4 Medium4 Low
CriticalCredential Exfiltrationdist/index.js
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/functions-runtime.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighCross File Remote Execution Contextdist/functions-runtime.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
Affected versions and remediation
This report applies to @byteplus-iga-pages/cli@1.2.1.
See all versions of @byteplus-iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @byteplus-iga-pages/cli@1.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.