@contrail/cli@3.5.7
VibeIQ's Contrail Platform CLI.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package has no install-time behavior that exfiltrates data, but its explicit app publishing workflow silently bundles identifying workstation and Git metadata with the build and uploads it. This is suspicious telemetry to the package's service, rather than evidence of a malicious attack.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the app publish/deploy command.
Impact
The Contrail service receives identifying details about the publishing machine and project that are not necessary to upload the app source.
Mechanism
The CLI gathers host, directory, user, and Git details into build-info.json, includes it in the app package, and uploads the package to a signed URL returned by the Contrail API.
AI rationale
The package has no install-time behavior that exfiltrates data, but its explicit app publishing workflow silently bundles identifying workstation and Git metadata with the build and uploads it. This is suspicious telemetry to the package's service, rather than evidence of a malicious attack.
Evidence
dist/helpers/app/metadata-extractor.jsdist/helpers/app/app-deployer.jsdist/commands/app/publish.jsdist/helpers/config/config.jstmp/build-info.jsontmp/dist/build-info.jsontmp.zip
Network endpoints3
api.vibeiq.comapi.dev.vibeiq.comappCodePackage.uploadURL (signed URL returned dynamically)
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- App build metadata collects the machine hostname, home and temporary directories, working directory, and the build user's name.
- The helper reads Git details including the remote URL and commit message; the metadata is added to the app package and uploaded to a signed URL during publishing.
- The collection and upload occur through the explicit app publish/deploy workflow.
Evidence against
- The manifest has no install lifecycle hook, and the package entry points launch the oclif CLI.
- Packaging and uploading an app build is part of the CLI's stated purpose; no unrelated collector or automatic startup transmission was identified.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
12 flaggeddist/helpers/app/metadata-extractor.jsView file
5const os = tslib_1.__importStar(require("os"));
L6: const child_process_1 = require("child_process");
L7: const fs_1 = tslib_1.__importDefault(require("fs"));
High
Child Process
Package source references child process execution.
dist/helpers/app/metadata-extractor.jsView on unpkg · L5node_modules/@opentelemetry/otlp-transformer/node_modules/@opentelemetry/resources/build/esm/detectors/platform/node/machine-id/execAsync.jsView file
17import * as util from 'util';
L18: export const execAsync = util.promisify(child_process.exec);
L19: //# sourceMappingURL=execAsync.js.map
High
Shell
Package source references shell execution.
node_modules/@opentelemetry/otlp-transformer/node_modules/@opentelemetry/resources/build/esm/detectors/platform/node/machine-id/execAsync.jsFindings
7 High7 Medium6 Low
HighChild Processdist/helpers/app/metadata-extractor.js
HighShellnode_modules/@opentelemetry/otlp-transformer/node_modules/@opentelemetry/resources/build/esm/detectors/platform/node/machine-id/execAsync.js
HighObfuscated Payload Loadernode_modules/protobufjs/dist/protobuf.js
HighRuntime Package Installdist/helpers/app/app-deployer.js
HighShips High Entropy Blobnode_modules/amazon-cognito-identity-js/dist/amazon-cognito-identity.min.js.gz
HighPayload In Excluded Dirnode_modules/thread-stream/test/dir with spaces/test-package.zip
HighSemantic Analysis Limiteddist/commands/feature-flags/import.js#virtual:normalized:round1
MediumDynamic Requiredist/logger.js
MediumUnsafe Vm Contextnode_modules/pino/benchmarks/utils/wrap-log-level.js
Affected versions and remediation
This report applies to @contrail/cli@3.5.7.
See all versions of @contrail/cli for other recorded verdicts.
- Review the evidence and your use of @contrail/cli@3.5.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.