registry / @tangle-network/sandbox-cli / 0.20.60
@tangle-network/sandbox-cli@0.20.60
CLI for Tangle Sandbox operations
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest describes a Tangle Sandbox CLI and declares no install lifecycle hooks. The inspected credential flows target Tangle service endpoints or a configured sandbox base URL, with no evidence of an unrelated collector or concealed execution chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI entry point imports the command implementation, which parses the user's command-line arguments.
Impact
No unauthorized collection, unrelated credential transfer, or harmful automatic action was identified in the reviewed source.
Mechanism
Credentials are read from Tangle-specific environment variables or the local Tangle credential store and used with Tangle service requests; the inspected hub-key flow targets the configured sandbox base URL.
AI rationale
The manifest describes a Tangle Sandbox CLI and declares no install lifecycle hooks. The inspected credential flows target Tangle service endpoints or a configured sandbox base URL, with no evidence of an unrelated collector or concealed execution chain.
Evidence
~/.tangle/credentials~/.tangle/config.json
Network endpoints3
id.tangle.toolssolve.tangle.toolssandbox.tangle.tools
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a Tangle Sandbox CLI and has no install, preinstall, or postinstall hook.
- The CLI reads Tangle API credentials from named environment variables or its credential store.
- The default sandbox endpoint is sandbox.tangle.tools; authentication also uses Tangle service endpoints.
- The hub-key flow sends a bearer token to a URL built from the configured sandbox service base URL.
Evidence against
- The flagged process execution is not evidence of a hidden payload: the package is a sandbox operations CLI, and the inspected excerpts show no unrelated download-and-execute behavior.
- The credential sources and destinations inspected are consistent with authenticating to the package’s named Tangle services; no unrelated collector was identified.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/index.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @tangle-network/sandbox-cli@0.20.50
matchedIdentity = npm:[redacted]:0.20.50
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.mjsView on unpkg1import{createRequire as e}from"node:module";import"dotenv/config";import{ALL_BACKEND_TYPES as t,AuthError as n,GPU_LEASE_PROVIDER_NAMES as r,NetworkError as i,NotFoundError as a,Pu...
L2: `);return`Hub connection reference is ambiguous: "${e}" matches ${t.length} connections. Use a connection id or provider:account instead.
High
1import{createRequire as e}from"node:module";import"dotenv/config";import{ALL_BACKEND_TYPES as t,AuthError as n,GPU_LEASE_PROVIDER_NAMES as r,NetworkError as i,NotFoundError as a,Pu...
L2: `);return`Hub connection reference is ambiguous: "${e}" matches ${t.length} connections. Use a connection id or provider:account instead.
Findings
1 Critical5 High2 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.mjs
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCredential Redirect Persistencedist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @tangle-network/sandbox-cli@0.20.60.
See all versions of @tangle-network/sandbox-cli for other recorded verdicts.
- Review the evidence and your use of @tangle-network/sandbox-cli@0.20.60 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.