@t2code/cli@0.0.39
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe CLI sends default-on runtime analytics to PostHog, including usage metadata and a pseudonymous identifier. The source provides a disable setting, but user-facing disclosure is not established, so this is suspicious telemetry rather than evidence of credential theft or malicious exfiltration.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
CLI server runtime and usage events; telemetry is enabled by default.
Impact
The vendor analytics service receives usage metadata and a pseudonymous identifier without an evident user-facing disclosure in the inspected package source.
Mechanism
Buffers analytics events and posts batches with an installation identifier and runtime fields to the configured PostHog host.
AI rationale
The CLI sends default-on runtime analytics to PostHog, including usage metadata and a pseudonymous identifier. The source provides a disable setting, but user-facing disclosure is not established, so this is suspicious telemetry rather than evidence of credential theft or malicious exfiltration.
Evidence
dist/bin.mjs
Network endpoints1
us.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime PostHog telemetry is enabled by default and can be redirected through configuration.
- Telemetry sends an installation identifier and platform, architecture, app version, and client type to PostHog.
- The identifier may be derived by hashing a Codex or Claude account ID.
- Usage events include provider, model, interaction mode, attachment count, and whether input was present; no prompt text is shown in the inspected event.
Evidence against
- The telemetry code describes the identifier as anonymous and provides a T3CODE_TELEMETRY_ENABLED setting to disable collection.
- The inspected usage event sends metadata and a Boolean input-presence flag, not the input itself.
- The CLI starts only when its entry point is invoked.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
8 flaggeddist/NodeServices-dtFYIkeJ.mjsView file
6import { a as Size, c as BadArgument, d as systemError, i as FileTypeId, n as TypeId$5, o as WatchBackend, r as FileSystem, s as make$12, t as Path$1, u as badArgument } from "./Pa...
L7: import * as NodeChildProcess from "node:child_process";
L8: import { PassThrough } from "node:stream";
High
Child Process
Package source references child process execution.
dist/NodeServices-dtFYIkeJ.mjsView on unpkg · L66Cross-file remote execution chain: dist/NodeServices-dtFYIkeJ.mjs spawns dist/Schema-CazMSJao.mjs; helper contains network access plus dynamic code execution.
L6: import { a as Size, c as BadArgument, d as systemError, i as FileTypeId, n as TypeId$5, o as WatchBackend, r as FileSystem, s as make$12, t as Path$1, u as badArgument } from "./Pa...
L7: import * as NodeChildProcess from "node:child_process";
L8: import { PassThrough } from "node:stream";
...
L226: * operating-system processes. A spawner turns a command description into a
L227: * handle that can write to stdin, read stdout and stderr, wait for exit, kill
L228: * the process, and manage whether the process keeps its parent alive. Platform
...
L581: return callback(function loop(resume) {
L582: for (; i < chunk.length;) if (!optio
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/NodeServices-dtFYIkeJ.mjsView on unpkg · L6Findings
1 Critical5 High6 Medium4 Low
CriticalTrojan Source Unicodedist/client/assets/ComposerPromptEditor-DoPQdKpd.js
HighChild Processdist/NodeServices-dtFYIkeJ.mjs
HighShell
HighCross File Remote Execution Contextdist/NodeServices-dtFYIkeJ.mjs
HighKnown Malware Source Similaritydist/NodePtyAdapter-CgJqr3S6.mjs
HighKnown Malware Source Similaritydist/BunPtyAdapter-DRo_CeP-.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/client/assets/ghostty-vt-DdA0Zryv.wasm
MediumOversized Source Filedist/bin.mjs
MediumOversized Cli Entrypointdist/bin.mjs
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @t2code/cli@0.0.39.
See all versions of @t2code/cli for other recorded verdicts.
- Review the evidence and your use of @t2code/cli@0.0.39 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.