@cloop/runner@0.3.24
Make your machine and your agents Cloop runners: device login, the runner daemon, the Cloop MCP server, and Claude Code hooks.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe automatic connection report includes identifying hostname data, which makes this undisclosed telemetry suspicious under the review rules. The report goes to Cloop’s own service during an explicit connect command, and the inspected source does not show credential or file-content exfiltration.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs `cloop connect`; a report is sent after each attempt.
Impact
Cloop receives machine-identifying setup telemetry without an evident reporting opt-out.
Mechanism
The report includes a shortened machine hostname and connection setup details, then posts them to the configured Cloop origin.
AI rationale
The automatic connection report includes identifying hostname data, which makes this undisclosed telemetry suspicious under the review rules. The report goes to Cloop’s own service during an explicit connect command, and the inspected source does not show credential or file-content exfiltration.
Evidence
dist/chunk-UVB722OW.jsdist/chunk-PQPWITU3.jsdist/chunk-D5UZW42X.js
Network endpoints2
mcp.mycloop.commcp-staging.mycloop.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Connect reports include the shortened machine hostname along with platform, runtime, harness and setup outcome details.
- Every connect attempt sends the report automatically, including attempts that fail.
- The report is posted to the configured Cloop origin.
Evidence against
- The report is sent to the package's own Cloop service and is limited to connection diagnostics; no credentials or file contents appear in the reported fields.
- The send is triggered by the explicit `cloop connect` command, not package installation or ordinary import.
- The manifest declares no lifecycle scripts.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/chunk-UVB722OW.jsView file
15// src/commands/login.ts
L16: import { execFile } from "child_process";
L17: import { hostname } from "os";
High
Child Process
Package source references child process execution.
dist/chunk-UVB722OW.jsView on unpkg · L1551function connectReport(attempt, error, machine, now = Date.now()) {
return {
attempt_id: attempt.id,
cli_version: VERSION,
os: process.platform,
arch: process.arch,
node_version: process.version,
machine: shortMachineLabel(machine),
harnesses: attempt.harnesses,
dri
Medium
Ai Review Evidence
Connect reports include the shortened machine hostname along with platform, runtime, harness and setup outcome details.
dist/chunk-UVB722OW.jsView on unpkg · L51dist/chunk-PQPWITU3.jsView file
38windowsExecutable,
L39: windowsPowerShellEnv,
L40: writeBoxConfig
...
L96: import { basename, delimiter, dirname, join, posix, win32 } from "path";
L97: var CODEX_RELEASES = "https://github.[redacted]";
L98: var CODEX_TRIPLES = {
...
L116: var CODEX_SUMS = `${CODEX_RELEASES}/codex-package_SHA256SUMS`;
L117: function codexInstallCommand(home, platform = process.platform, arch = process.arch) {
L118: const asset = codexAsset(platform, arch);
...
L224: }
L225: function findLocalCodex(home, env = process.env) {
L226: findIn(codexBinDir(home), "codex", env);
Findings
1 Critical3 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/chunk-NVESLEXA.js
HighChild Processdist/chunk-UVB722OW.js
HighSandbox Evasion Gated Capabilitydist/chunk-PQPWITU3.js
HighRuntime Package Installdist/chunk-PQPWITU3.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/chunk-UVB722OW.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cloop/runner@0.3.24.
See all versions of @cloop/runner for other recorded verdicts.
- Review the evidence and your use of @cloop/runner@0.3.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.