@hs-x/cli
HS-X CLI — init, validate, connect, dev, deploy, promote, rollback, doctor, sync. Installs the `hs-x` command.
This report shows the evidence for @hs-x/cli@0.4.15. 0 of 16 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package’s normal CLI behavior is supported by the source, and the flagged credential flows are for Cloudflare or the HS-X control plane. However, successful unlinked deploys automatically report project-specific details and a worker URL to HS-X without a visible opt-out, which is undisclosed runtime telemetry.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Automatically after a successful, non-dry-run Cloudflare deploy in unlinked mode.
Impact
The control plane receives project-specific deployment metadata and the worker hostname; no credential exfiltration to an unrelated host was identified.
Mechanism
POSTs a deploy event authenticated with the machine secret, including project/deploy identifiers, environment, and worker URL.
AI rationale
The package’s normal CLI behavior is supported by the source, and the flagged credential flows are for Cloudflare or the HS-X control plane. However, successful unlinked deploys automatically report project-specific details and a worker URL to HS-X without a visible opt-out, which is undisclosed runtime telemetry.
Evidence
dist/commands/deploy.jsdist/config.js
Network endpoints1
api.hs-x.dev/v1/machines/{machineId}/events
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes the package as an `hs-x` CLI and declares no install lifecycle hooks.
- After a successful, non-dry-run Cloudflare deploy in unlinked mode, the command emits a deploy event.
- That event sends project and deploy IDs, environment, and the deployed worker URL to the control plane using a machine secret.
- The default event destination is the HS-X control plane at `https://api.hs-x.dev`.
- The event is tied to a user-invoked deploy; the code requires explicit consent for durable deploy changes.
Evidence against
- Cloudflare credentials used to resolve a worker subdomain are sent to Cloudflare’s API endpoint.
- The event goes to the package’s own control plane and reports deploy status; no unrelated collector or credential theft was identified.
- The manifest contains no install hook, so the event does not run during installation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem
Source & flagged code
6 flaggeddist/dev/compat-shim.jsView file
71const loggerMod = await import('@hubspot/local-dev-lib/logger');
L72: const importRuntime = new Function('specifier', 'return import(specifier)');
L73: const parsing = await importRuntime('@hubspot/project-parsing-lib/translate');
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/dev/compat-shim.jsView on unpkg · L71dist/dev/invoke.jsView file
187try {
L188: mod = (await import(pathToFileURL(path).href));
L189: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/dev/invoke.jsView on unpkg · L187dist/commands/deploy.jsView file
1import { spawn } from 'node:child_process';
L2: import { createHash, randomBytes } from 'node:crypto';
L3: import { lstat, mkdir, readFile, readdir, realpath, rename, rmdir, stat, unlink, writeFile, } from 'node:fs/promises';
L4: import { createServer } from 'node:http';
L5: import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
...
L66: const explicitFlag = resolveFlag(input.argv, '--account-id');
L67: const fromFlag = explicitFlag ?? process.env.HSX_ACCOUNT_ID;
L68: if (fromFlag && fromFlag.length > 0) {
...
L146: }
L147: return { exitCode: 10 };
L148: }
...
L246: headers: { 'content-type': 'application/x-www-form-urlencoded' },
Findings
1 Critical3 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/hubspot-auth.js
HighCredential Exfiltrationdist/commands/deploy.js
HighTrigger Reachable Credential Exfiltrationdist/commands/deploy.js
HighSemantic Analysis Limiteddist/commands/doctor.js#virtual:normalized:round1
MediumDynamic Requiredist/dev/invoke.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEvaldist/dev/compat-shim.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @hs-x/cli@0.4.15.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @hs-x/cli@0.4.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.