registry / Credential exfiltration / @nocobase/cli-v1 / 2.2.6

@nocobase/cli-v1@2.2.6

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The default credential recipient is package-aligned, but the unrestricted destination override can redirect saved service credentials. This is a conditional credential exposure risk, so warn without treating it as proof of malicious intent.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user invokes a command path that downloads commercial plugins while credentials are available and a destination is configured.

Impact

A configured alternate endpoint can receive credentials intended for the vendor package service.

Mechanism

The command passes the configured destination to the package client, which posts the saved access-key pair or environment credentials as login data.

AI rationale

Evidence

src/license.jssrc/commands/pkg.jssrc/util.jssrc/commands/global.jssrc/commands/start.jssrc/commands/update-deps.js

Network endpoints1

pkg.nocobase.com/

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The credential helper reads a saved license key and checks it against the current environment before returning its access-key pair.
The package download command accepts a configurable destination and uses the vendor package service as its default; it does not restrict an override.
When credentials are present, the command sends the saved access-key pair or configured username and password in a login request to that destination.
The transfer is reachable through the download command and through install, quickstart, and dependency-update flows.

Evidence against

The default destination is the vendor package service, and the transfer requires credentials to be present; a different recipient requires a configured destination override.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStrings

Source & flagged code

7 flagged

src/commands/e2e.jsView file

Lines 1-31javascript

1/**

2 * This file is part of the NocoBase (R) project.

4 * Authors: NocoBase Team.

5 *

6 * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.

7 * For more information, please refer to: https://www.nocobase.com/agreement.

8 */

10const { Command } = require('commander');

11const { run, isPortReachable, checkDBDialect, storagePathJoin } = require('../util');

12const { execSync } = require('node:child_process');

13const axios = require('axios');

High

Child Process

Package source references child process execution.

src/commands/e2e.jsView on unpkg · L11

14const { pTest } = require('./p-test');

15const os = require('os');

16const treeKill = require('tree-kill');

17const chalk = require('chalk');

19/**

20 * 检查服务是否启动成功

21 */

22const checkServer = async (duration = 1000, max = 60 * 10) => {

23 return new Promise((resolve, reject) => {

24 let count = 0;

25 const timer = setInterval(async () => {

26 if (count++ > max) {

27 clearInterval(timer);

28 return reject(new Error('Server start timeout.'));

29 }

31 // if (!(await checkPort(PORT))) {

Lines 103-143javascript

103 run('nocobase-v1', [process.env.APP_ENV === 'production' ? 'start' : 'dev'], options);

104}

105

106process.on('SIGINT', async () =>

src/util.jsView file

Lines 1-31javascript

1/**

2 * This file is part of the NocoBase (R) project.

4 * Authors: NocoBase Team.

5 *

6 * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.

7 * For more information, please refer to: https://www.nocobase.com/agreement.

8 */

10const net =

bin/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const chalk = require('chalk');

4const { initEnv, genTsConfigPaths } = require('../src/util');

Medium

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

src/commands/dev.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @nocobase/cli-v1@2.1.17 matchedIdentity = npm:QG5vY29iYXNlL2NsaS12MQ:2.1.17 similarity = 0.911 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/commands/dev.jsView on unpkg

Source & flagged code

7 flagged · loading source

src/commands/e2e.jsView file

11const { run, isPortReachable, checkDBDialect, storagePathJoin } = require('../util'); L12: const { execSync } = require('node:child_process'); L13: const axios = require('axios');

High

Child Process

Package source references child process execution.

src/commands/e2e.jsView on unpkg · L11

123try { L124: execSync( L125: `npx playwright codegen --load-storage=${authFile} ${process.env.APP_BASE_URL} --save-storage=${authFile}`, L126: commonConfig,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/commands/e2e.jsView on unpkg · L123

src/util.jsView file

11const chalk = require('chalk'); L12: const execa = require('execa'); L13: const fg = require('fast-glob');

High

Shell

Package source references shell execution.

src/util.jsView on unpkg · L11

Findings

1 Critical4 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltasrc/commands/dev.js

HighChild Processsrc/commands/e2e.js

HighShellsrc/util.js

HighRuntime Package Installsrc/commands/e2e.js

HighSemantic Analysis Limitedpackage.json

MediumDynamic Requirebin/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowEvalsrc/util.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @nocobase/cli-v1@2.2.6.

See all versions of @nocobase/cli-v1 for other recorded verdicts.

Review the evidence and your use of @nocobase/cli-v1@2.2.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 08:53:39.232Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.