@marinade.finance/validator-bonds-cli-core@3.0.0
Common CLI Core of the validator bonds contract
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package implements runtime Mixpanel telemetry that can report wallet identifiers, account activity, and transaction details without a disclosure found in the package. This warrants a warning for undisclosed runtime telemetry; the behavior is not install-time or import-time.
Static reason
No blocking static signals were detected.
Trigger
A CLI command's pre-action hook runs while cliUsageConfig.enabled is true and telemetry is not disabled.
Impact
The vendor receives identifiable wallet and account activity and command usage data without a disclosure found in this package.
Mechanism
The CLI collects wallet and account identifiers, command metadata, and completion details such as transaction signatures, then posts events to the configured Mixpanel proxy. Telemetry can be disabled with DO_NOT_TRACK=1.
AI rationale
The package implements runtime Mixpanel telemetry that can report wallet identifiers, account activity, and transaction details without a disclosure found in the package. This warrants a warning for undisclosed runtime telemetry; the behavior is not install-time or import-time.
Evidence
dist/src/cliUsage.jsdist/src/commands/mainCommand.js~/.config/validator-bonds/install-id
Network endpoints1
mix-proxy.marinade.finance/track
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- When CLI usage is enabled, the pre-action hook records command data and wallet/account identifiers.
- Telemetry properties include the wallet public key or install ID, session and command details, and platform/runtime information.
- Command-completion events can include transaction signatures, amounts, and account addresses, and are posted to the Mixpanel proxy.
- A built-in Mixpanel token and default proxy enable reporting unless telemetry is disabled.
Evidence against
- The package declares no install or lifecycle scripts; its npm scripts are build and test tasks.
- Telemetry runs through the CLI action hook rather than during module import.
- The install ID is a random UUID stored under the user's config directory.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/src/commands/mainCommand.jsView file
91if (cliUsageConfig?.enabled && !(0, cliUsage_1.isTelemetryDisabled)()) {
const arg = await Promise.resolve(action.processedArgs[0]).catch(() => undefined);
const account = arg instanceof web3_js_1.PublicKey ? arg.toBase58() : undefined;
const { accountFiel
Medium
Ai Review Evidence
When CLI usage is enabled, the pre-action hook records command data and wallet/account identifiers.
dist/src/commands/mainCommand.jsView on unpkg · L91dist/src/cliUsage.jsView file
158function buildBaseProperties(params) {
const token = getMixpanelToken();
const distinctId = params.walletPubkey ?? params.installId;
const props = {
token,
time: Math.
Medium
Ai Review Evidence
Telemetry properties include the wallet public key or install ID, session and command details, and platform/runtime information.
dist/src/cliUsage.jsView on unpkg · L158Findings
6 Medium4 Low
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/src/commands/mainCommand.js
MediumAi Review Evidencedist/src/cliUsage.js
MediumAi Review Evidencedist/src/cliUsage.js
MediumAi Review Evidencedist/src/cliUsage.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @marinade.finance/validator-bonds-cli-core@3.0.0.
See all versions of @marinade.finance/validator-bonds-cli-core for other recorded verdicts.
- Review the evidence and your use of @marinade.finance/validator-bonds-cli-core@3.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.