@iga-pages/cli
A CLI tool for IGA Pages
This report shows the evidence for @iga-pages/cli@1.2.1. 0 of 13 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe source shows default-on runtime telemetry sent to vendor analytics, with no telemetry disclosure found in the inspected README. The evidence does not establish credential theft or the flagged remote execution behavior, so this warrants a warning rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command, which reports when it completes.
Impact
Command usage and associated telemetry fields are disclosed to the vendor's analytics service without an evident disclosure in the inspected package README.
Mechanism
The CLI submits command metadata and sanitized parameters to the reporter endpoint; an environment variable can disable reporting.
AI rationale
The source shows default-on runtime telemetry sent to vendor analytics, with no telemetry disclosure found in the inspected README. The evidence does not establish credential theft or the flagged remote execution behavior, so this warrants a warning rather than a publish block.
Evidence
dist/index.js
Network endpoints2
mcs.zijieapi.com/listsgali-mcs.byteoversea.com/list
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI sends command telemetry by default and disables it only when IGA_PAGES_TELEMETRY_DISABLED=1.
- Telemetry includes command metadata and parameters, result, runtime details, and an account ID when set.
- The reporter posts telemetry to mcs.zijieapi.com or sgali-mcs.byteoversea.com.
Evidence against
- The manifest has no lifecycle scripts; telemetry is triggered by CLI command completion.
- The telemetry configuration provides an environment-variable opt-out and marks accessKey, secretKey, and value as sensitive parameter names.
- The reviewed source did not establish automatic credential exfiltration or unrelated remote code execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
13 flaggeddist/functions-runtime.jsView file
2671"use strict";
L2672: const cp = __webpack_require__("child_process");
L2673: const parse = __webpack_require__("../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js");
High
Child Process
Package source references child process execution.
dist/functions-runtime.jsView on unpkg · L2671557Cross-file remote execution chain: dist/functions-runtime.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L557: const ansiStyles = __webpack_require__("../../node_modules/.pnpm/ansi-styles@4.3.0/node_modules/ansi-styles/index.js");
L558: const { stdout: stdoutColor, stderr: stderrColor } = __webpack_require__("../../node_modules/.pnpm/supports-color@7.2.0/node_modules/supports-color/index.js");
L559: const { stringReplaceAll, stringEncaseCRLFWithFirstIndex } = __webpack_require__("../../node_modules/.pnpm/chalk@4.1.2/node_modules/chalk/source/util.js");
...
L767: const bracket = '{' === c[1];
L768: if (u && !bracket && 5 === c.length || 'x' === c[0] && 3 === c.length) return String.fromCharCode(parseInt(c.slice(1), 16));
L769: if (u && bracket) return S
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/functions-runtime.jsView on unpkg · L557Findings
4 Critical8 High4 Medium4 Low
CriticalCredential Exfiltrationdist/index.js
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/functions-runtime.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighCross File Remote Execution Contextdist/functions-runtime.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
Affected versions and remediation
This report applies to @iga-pages/cli@1.2.1.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @iga-pages/cli@1.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.