registry / @getbrevo/cli / 2.3.0
@getbrevo/cli@2.3.0
⚠ Under reviewBrevo Developer CLI — create, manage apps and OAuth integrations
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsProtestwareUrlStrings
Source & flagged code
5 flaggeddist/bin/index.jsView file
157`)}function createHelpFormatter(root){return(cmd,helper)=>cmd!==root?import_commander.Help.prototype.formatHelp.call(helper,cmd,helper):formatRootHelp(helper.commandDescription(cmd...
L158: `)}function hasEmittedJson(){return emitted}function buildJsonError(err){let envelope={error:{name:err instanceof Error?err.name:"Error",message:err instanceof Error?err.message:St...
L159: ${messages.APP_LIST_EMPTY}
High
Child Process
Package source references child process execution.
dist/bin/index.jsView on unpkg · L157685</html>
L686: `}function closeServer(server){return new Promise(resolveClose=>{server.close(()=>resolveClose())})}function startScopesWebServer(initialEntries,options={}){let html=renderScopesHt...
L687: `);throw new CliError(messages.APP_START_MISSING_FEATURE(available))}let featureConfig=FEATURES[feature];if(!featureConfig){let available=Object.keys(FEATURES).join(", ");throw new...
...
L689: `),resolve11())}),child.on("error",err=>{process.removeListener("SIGINT",onSignal),process.removeListener("SIGTERM",onSignal),reject(new CliError(messages.APP_START_FAILED(feature,...
L690: Starting ${feature}...`);let childEnv={...process.env,PORT:String(port)};redirectUri&&(childEnv.REDIRECT_URI=redirectUri),await runChildProcess(entryFile,childEnv,feature)});var im...
L691: ${cancelledMessa
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/index.jsView on unpkg · L685Findings
5 High3 Medium5 Low
HighChild Processdist/bin/index.js
HighSame File Env Network Executiondist/bin/index.js
HighCredential Redirect Persistencedist/bin/index.js
HighCommand Output Exfiltrationdist/bin/index.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/index.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @getbrevo/cli@2.3.0.
See all versions of @getbrevo/cli for other recorded verdicts.
- Review the evidence and your use of @getbrevo/cli@2.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.