@shipeasy/cli@2.18.0
CLI for the Shipeasy platform (flags, experiments, translations, bugs)
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe source establishes conditional credential exposure: a saved api_base_url controls where command-error reports and the saved CLI token are sent. The default is the package’s service, so this supports a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
A CLI command raises a Commander error.
Impact
A modified saved destination could receive the CLI token and error details.
Mechanism
The error handler selects the report URL from saved api_base_url, falls back to api.shipeasy.ai, and attaches the saved cli_token in an X-SDK-Key header.
AI rationale
The source establishes conditional credential exposure: a saved api_base_url controls where command-error reports and the saved CLI token are sent. The default is the package’s service, so this supports a warning rather than a block.
Evidence
dist/index.jsbin/shipeasy.js
Network endpoints1
api.shipeasy.ai
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The launcher runs the bundled CLI, whose error handler sends command errors to a URL derived from saved credentials.
- The error report attaches the saved CLI token and posts without a recipient-specific consent check.
- Saved credentials are read from a local JSON file, and the report destination can come from its api_base_url field.
Evidence against
- Login initializes the API destination to api.shipeasy.ai, consistent with the package’s service.
- The package manifest declares no install lifecycle scripts; the report path is reached after a CLI command error.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
47var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
High
46var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L4646var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
L59: return import_node_path.default.join(root, "shipeasy", "config.json");
...
L80: const raw = import_node_fs.default.readFileSync(configPath(), "utf-8");
L81: const parsed = JSON.parse(raw);
L82: if (!parsed.project_id || !parsed.cli_token) return null;
...
L272: });
Findings
6 High4 Medium4 Low
HighChild Processdist/index.js
HighShell
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationdist/index.js
HighCredential Redirect Persistencedist/index.js
HighRuntime Package Installdist/index.js
MediumDynamic Requirebin/shipeasy.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @shipeasy/cli@2.18.0.
See all versions of @shipeasy/cli for other recorded verdicts.
- Review the evidence and your use of @shipeasy/cli@2.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.