@shipeasy/cli@2.23.1
CLI for the Shipeasy platform (flags, experiments, translations, bugs)
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe CLI sends error details and command arguments to its own service without a disclosed consent or opt-out control in the reviewed source. The flow is limited to CLI errors and sanitizes arguments, so this is suspicious telemetry rather than a malicious attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI invocation encounters a non-silent Commander error.
Impact
The vendor receives command error details and usage metadata without a disclosed consent or opt-out control found in the reviewed source.
Mechanism
The CLI sends the error message, sanitized arguments, and runtime metadata to the worker’s /cli/errors endpoint, with the CLI key in a request header when available.
AI rationale
The CLI sends error details and command arguments to its own service without a disclosed consent or opt-out control in the reviewed source. The flow is limited to CLI errors and sanitizes arguments, so this is suspicious telemetry rather than a malicious attack.
Evidence
dist/index.jsbin/shipeasy.js
Network endpoints1
api.shipeasy.ai/cli/errors
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI calls reportCliError for non-silent Commander errors during command execution.
- The error report includes the error message, sanitized command arguments, exit code, CLI and Node versions, platform, and timestamp; it adds the Shipeasy CLI key when available.
- The reporter POSTs that report to the configured Shipeasy worker’s /cli/errors endpoint.
Evidence against
- The manifest has no install lifecycle script; the package exposes a CLI and program entry point.
- The error report goes to the Shipeasy service and sanitizes arguments before sending them.
- The CLI entry point runs the command handler when invoked.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @shipeasy/cli@2.23.0
matchedIdentity = npm:QHNoaXBlYXN5L2NsaQ:2.23.0
similarity = 0.963
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg47var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
High
46var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical6 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShell
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationdist/index.js
HighCredential Redirect Persistencedist/index.js
HighRuntime Package Installdist/index.js
MediumDynamic Requirebin/shipeasy.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @shipeasy/cli@2.23.1.
See all versions of @shipeasy/cli for other recorded verdicts.
- Review the evidence and your use of @shipeasy/cli@2.23.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.