@shopify/cli@5.0.1
A CLI tool to build for the Shopify platform
AI Security Review
scanned 6h ago · by lpm-firewall-aiThe package’s default command hook sends command arguments as telemetry to Shopify’s own analytics endpoint, with only limited redaction. This is suspicious telemetry under the review rules, but the source does not show credential theft or unrelated collection.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI command starts and runs the prerun hook.
Impact
Command arguments may contain sensitive values that are not covered by the redaction rules.
Mechanism
The hook passes argv to analytics; the resulting payload includes the joined arguments and applies limited redaction before sending.
AI rationale
The package’s default command hook sends command arguments as telemetry to Shopify’s own analytics endpoint, with only limited redaction. This is suspicious telemetry under the review rules, but the source does not show credential theft or unrelated collection.
Evidence
dist/hooks/prerun.jsdist/chunk-NCPZVARH.js
Network endpoints1
monorail-edge.shopifysvc.com/v1/produce
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The default prerun hook calls startAnalytics with the command arguments.
- The telemetry payload includes the full command arguments and applies only limited secret redaction.
- The analytics code sends command telemetry to Shopify’s Monorail endpoint.
Evidence against
- This is a Shopify CLI, and the telemetry is sent to a Shopify service.
- The manifest has no install, preinstall, or postinstall script.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
18 flaggeddist/chunk-WBJ6ZHYH.jsView file
67`)[0])}};M.Help=Kn;function Xo(n){return n&&n.default?n.default:n}function Wh(n){return typeof n=="string"?{identifier:"default",target:n}:n.identifier?n:{...n,identifier:"default"...
L68: ${i.message}`)}}return Kn}});var Xn=m(Ee=>{"use strict";u();var Cr=Ee&&Ee.__importDefault||function(n){return n&&n.__esModule?n:{default:n}};Object.defineProperty(Ee,"__esModule",{...
L69: This usually means you have an oclif.manifest.json file that should be deleted in development. This file should be automatically generated when publishing.`);else return this._debu...
High
Child Process
Package source references child process execution.
dist/chunk-WBJ6ZHYH.jsView on unpkg · L674`),g=`${i?"Caused by: ":""}${y}`;g=(0,qd.default)(g,Fd.errtermwidth-6,{hard:!0,trim:!1}),ho.settings.debug||(g=(0,xn.default)(g,3),g=(0,xn.default)(g,1,{includeEmptyLines:!0,indent...
L5: `)}});var mt=m(be=>{"use strict";u();var kd=be&&be.__createBinding||(Object.create?(function(n,e,t,i){i===void 0&&(i=t);var r=Object.getOwnPropertyDescriptor(e,t);(!r||("get"in r?!...
L6: `&&this._write(t,`
High
4`),g=`${i?"Caused by: ":""}${y}`;g=(0,qd.default)(g,Fd.errtermwidth-6,{hard:!0,trim:!1}),ho.settings.debug||(g=(0,xn.default)(g,3),g=(0,xn.default)(g,1,{includeEmptyLines:!0,indent...
L5: `)}});var mt=m(be=>{"use strict";u();var kd=be&&be.__createBinding||(Object.create?(function(n,e,t,i){i===void 0&&(i=t);var r=Object.getOwnPropertyDescriptor(e,t);(!r||("get"in r?!...
L6: `&&this._write(t,`
Findings
1 Critical10 High8 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/chunk-75LAVRRL.js
HighChild Processdist/chunk-WBJ6ZHYH.js
HighShelldist/chunk-WBJ6ZHYH.js
HighSame File Env Network Executiondist/chunk-IGE4Y5SE.js
HighCommand Output Exfiltrationdist/chunk-IGE4Y5SE.js
HighSandbox Evasion Gated Capabilitydist/chunk-GSGCSBRN.js
HighCloud Metadata Accessdist/chunk-MNWT2SQO.js
HighObfuscated Payload Loaderdist/morph-CRY35DIK.js
HighCross File Remote Execution Contextdist/chunk-NCPZVARH.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-NCPZVARH.js
HighSemantic Analysis Limiteddist/chunk-7Y7AZRL3.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @shopify/cli@5.0.1.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@5.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.