@infcode/cli-linux-x64@1.0.2
AI Security Review
scanned 6d ago · by lpm-firewall-aiOrdinary CLI startup enables runtime telemetry unless `experimental.openTelemetry` is explicitly disabled, and the events include command and session usage metadata sent to PostHog. The inspected events do not include prompt contents or credentials, but the default collection is not clearly disclosed in the package snapshot, so this warrants a warning.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
CLI service initialization during ordinary command startup.
Impact
Usage metadata is shared with the PostHog endpoint. The inspected event definitions do not show prompt contents or credentials being sent.
Mechanism
The telemetry client sends events including command names, session identifiers, model and provider, and usage statistics; configuration can disable it with `experimental.openTelemetry: false`.
AI rationale
Ordinary CLI startup enables runtime telemetry unless `experimental.openTelemetry` is explicitly disabled, and the events include command and session usage metadata sent to PostHog. The inspected events do not include prompt contents or credentials, but the default collection is not clearly disclosed in the package snapshot, so this warrants a warning.
Evidence
bin/infcode.mapbin/chunk-kf7hr83w.js.mapbin/chunk-d6n39ed0.js.map
Network endpoints1
us.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- CLI service initialization starts telemetry for ordinary commands, and it is enabled unless `experimental.openTelemetry` is explicitly false.
- Telemetry events include command names and session IDs, models, providers, and usage statistics.
- The telemetry client sends events to `https://us.i.posthog.com`.
- The package snapshot does not clearly disclose this default runtime collection.
Evidence against
- The package manifest has no lifecycle scripts or JavaScript entry points.
- The inspected telemetry events contain usage metadata; no prompt contents or credentials were found in those event definitions.
- The manifest identifies this as a Linux x64 package, consistent with a platform-specific CLI binary.
Behavioral surface
EvalNetwork
NoLicense
Source & flagged code
9 flaggedbin/event_tracking_rs_bg.mjsView file
2351export function __wbg_new_no_args_ee98eee5275000a4(arg0, arg1) {
L2352: const ret = new Function(getStringFromWasm0(arg0, arg1));
L2353: return ret;
Low
Eval
Package source references a known benign dynamic code generation pattern.
bin/event_tracking_rs_bg.mjsView on unpkg · L2351bin/rgView file
•path = bin/rg
kind = native_binary
sizeBytes = 5445512
magicHex = [redacted]
Medium
bin/tree-sitter/tree-sitter-elm.wasmView file
•path = bin/tree-sitter/tree-sitter-elm.wasm
kind = wasm_module
sizeBytes = 148886
magicHex = [redacted]
Findings
1 High9 Medium2 Low
HighKnown Malware Source Similaritybin/image-runtime/node_modules/sharp/dist/constructor.cjs
MediumNetwork
MediumShips Native Binarybin/rg
MediumShips Wasm Modulebin/tree-sitter/tree-sitter-elm.wasm
MediumShips Build Helperbin/deepmap-skill/scripts/deepmap.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidencebin/infcode.map
MediumAi Review Evidencebin/chunk-kf7hr83w.js.map
MediumAi Review Evidencebin/chunk-d6n39ed0.js.map
MediumAi Review Evidencebin/chunk-d6n39ed0.js.map
LowEvalbin/event_tracking_rs_bg.mjs
LowNo License
Affected versions and remediation
This report applies to @infcode/cli-linux-x64@1.0.2.
See all versions of @infcode/cli-linux-x64 for other recorded verdicts.
- Review the evidence and your use of @infcode/cli-linux-x64@1.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.