@superblocksteam/cli@2.0.176
Official Superblocks CLI
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package is suspicious because its runtime instrumentation can report the machine hostname and OS without package-level disclosure of that collection. The flagged install cleanup is interactive, and the reviewed MCP login flow does not establish credential redirection.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the `dev` or `ai-service` command, when tracer telemetry is enabled.
Impact
Exposes identifying host metadata to the configured telemetry channel; no credential theft or unrelated file collection was identified.
Mechanism
The tracer collects hostname, OS and architecture and includes host data in telemetry events.
AI rationale
The package is suspicious because its runtime instrumentation can report the machine hostname and OS without package-level disclosure of that collection. The flagged install cleanup is interactive, and the reviewed MCP login flow does not establish credential redirection.
Evidence
bin/launch-mode.jsdist/chunk-Z3VK6NUY.js
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The preinstall hook skips conflict detection for non-global installs unless cleanup mode is explicitly set.
- For conflicting CLI installs, the hook displays the removal commands and asks before executing them.
- Telemetry preload is limited to the explicitly run `dev` and `ai-service` commands.
- The bundled tracer checks its telemetry-enabled setting before starting telemetry and sending app events.
- The tracer’s host metadata includes the machine hostname, OS and architecture.
- MCP browser login uses a selected or configured server URL and validates the OAuth configuration against it.
Evidence against
- The identified telemetry code is bundled Datadog tracing instrumentation, and its startup is gated by the tracer’s telemetry setting.
- The preinstall cleanup is limited to conflicting Superblocks CLI installations and requires an affirmative prompt response.
- The reviewed MCP login flow does not show a fixed foreign credential destination.
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
16 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/customer/preinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/customer/preinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @superblocksteam/cli@2.0.173
matchedIdentity = npm:QHN1cGVyYmxvY2tzdGVhbS9jbGk:2.0.173
similarity = 0.989
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
Findings
1 Critical10 High7 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelldist/index.js
HighHost Fingerprint Exfiltrationdist/chunk-Z3VK6NUY.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/chunk-Z3VK6NUY.js
HighSandbox Evasion Gated Capabilityscripts/verify-ripgrep-package.mjs
HighCross File Remote Execution Contextdist/chunk-Z3VK6NUY.js
HighTrigger Reachable External Post Callbackdist/chunk-Z3VK6NUY.js
HighSemantic Analysis Limiteddist/chunk-Z3VK6NUY.js
Affected versions and remediation
This report applies to @superblocksteam/cli@2.0.176.
See all versions of @superblocksteam/cli for other recorded verdicts.
- Review the evidence and your use of @superblocksteam/cli@2.0.176 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.