registry / @pawlogic/dl / 0.27.0
@pawlogic/dl@0.27.0
AI Security Review
scanned 24d ago · by lpm-firewall-aiSource inspection found user-invoked CLI entrypoints, configured authenticated service requests, and conditional self-update telemetry consistent with the package’s hosted CLI function. The scanner’s command-output exfiltration signal was not substantiated by the inspected data flow.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes one of the CLI binaries; hosted sandbox self-update runs as part of the dl command flow.
Impact
Service requests and update events may disclose command context identifiers to the configured service; the inspected behavior does not establish a malicious attack.
Mechanism
Authenticated CLI requests use configured service endpoints, and self-update events use the configured callback URL and proxy token. The reviewed source showed no unrelated credential forwarding or hidden command-output exfiltration.
AI rationale
Source inspection found user-invoked CLI entrypoints, configured authenticated service requests, and conditional self-update telemetry consistent with the package’s hosted CLI function. The scanner’s command-output exfiltration signal was not substantiated by the inspected data flow.
Network endpoints2
actionway.aicallback-server-z4umynwjcq-uc.a.run.app
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes dl.mjs and ilands.mjs as user-invoked CLI binaries and declares no install lifecycle hooks.
- dl.mjs uses an Actionway callback base or sandbox callback environment for service calls and self-update telemetry.
- Self-update telemetry is sent only when callback URL and proxy token are present, and includes validated context identifiers.
- ilands.mjs requires an environment-configured RPC URL and token, then sends authenticated CLI request data to that RPC service.
Evidence against
- dl.mjs and dl-npm-update.sh can automatically install a newer @pawlogic/dl release after a CLI invocation in the hosted sandbox.
- The updater reports selected project and user identifiers, prompt and tool-call IDs, and a bounded npm error tail to the configured callback service.
Behavioral surface
ChildProcessEnvironmentVarsEvalNetwork
HighEntropyStringsMinifiedTrivial
Source & flagged code
9 flaggeddl.mjsView file
1#!/usr/bin/env node
L2: import e,{readFileSync as t,existsSync as i,mkdirSync as n,writeFileSync as r,chmodSync as o,realpathSync as a,rmSync as s,cpSync as c}from"node:fs";import l,{dirname as d,resolve ...
High
1#!/usr/bin/env node
L2: import e,{readFileSync as t,existsSync as i,mkdirSync as n,writeFileSync as r,chmodSync as o,realpathSync as a,rmSync as s,cpSync as c}from"node:fs";import l,{dirname as d,resolve ...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dl.mjsView on unpkg · L11#!/usr/bin/env node
L2: import e,{readFileSync as t,existsSync as i,mkdirSync as n,writeFileSync as r,chmodSync as o,realpathSync as a,rmSync as s,cpSync as c}from"node:fs";import l,{dirname as d,resolve ...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dl.mjsView on unpkg · L1Findings
1 Critical5 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltailands.mjs
HighChild Processdl.mjs
HighSame File Env Network Executiondl.mjs
HighCommand Output Exfiltrationdl.mjs
HighSandbox Evasion Gated Capabilitydl.mjs
HighTrigger Reachable Command Output Exfiltrationdl.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdl-npm-update.sh
MediumStructural Risk Force Deep Review
LowEvaldl.mjs
LowWeak Cryptodl.mjs
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @pawlogic/dl@0.27.0.
See all versions of @pawlogic/dl for other recorded verdicts.
- Review the evidence and your use of @pawlogic/dl@0.27.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.