registry / @tangle-network/sandbox-cli / 0.21.65
@tangle-network/sandbox-cli@0.21.65
CLI for Tangle Sandbox operations
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged behavior is part of an explicit CLI supervision operation: it sends the Tangle API key to the configured Tangle router and strips that key from worker environments. I found no install-time action or evidence of an unrelated credential destination, so this version is clean.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs `tangle supervise <task>`.
Impact
The router and workers process the task and return a result as part of the requested CLI operation.
Mechanism
The command uses the configured Tangle router and spawns sandbox workers, stripping `TANGLE_API_KEY` from their inherited environment.
AI rationale
The flagged behavior is part of an explicit CLI supervision operation: it sends the Tangle API key to the configured Tangle router and strips that key from worker environments. I found no install-time action or evidence of an unrelated credential destination, so this version is clean.
Network endpoints1
router.tangle.tools
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI executable and `dist/index.mjs` as its main entry, with no install lifecycle scripts.
- The executable imports the CLI entry point; the entry parses command-line arguments.
- The router URL is configurable with `TANGLE_ROUTER_URL` and defaults to `https://router.tangle.tools/v1`.
- The explicit `supervise <task>` flow passes the Tangle API key to the configured router and removes `TANGLE_API_KEY` from the environment sent to spawned sandbox workers.
Evidence against
- The network and worker behavior is part of the documented CLI supervision command, rather than an install hook or an unrelated startup action.
- The source shows no evidence that credentials are sent to an unrelated host or that command output is secretly exfiltrated.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStrings
Source & flagged code
8 flaggeddist/index.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @tangle-network/sandbox-cli@0.20.50
matchedIdentity = npm:[redacted]:0.20.50
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.mjsView on unpkg1import{createRequire as e,findPackageJSON as t}from"node:module";import"dotenv/config";import{ALL_BACKEND_TYPES as n,AuthError as r,GPU_LEASE_PROVIDER_NAMES as i,NetworkError as a,...
L2: `);return`Hub connection reference is ambiguous: "${e}" matches ${t.length} connections. Use a connection id or provider:account instead.
High
1import{createRequire as e,findPackageJSON as t}from"node:module";import"dotenv/config";import{ALL_BACKEND_TYPES as n,AuthError as r,GPU_LEASE_PROVIDER_NAMES as i,NetworkError as a,...
L2: `);return`Hub connection reference is ambiguous: "${e}" matches ${t.length} connections. Use a connection id or provider:account instead.
Findings
1 Critical6 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.mjs
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCredential Redirect Persistencedist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
HighSemantic Analysis Limiteddist/graph-viewer/viewer/elk.bundled-ZJBRnwyo.js
MediumNetwork
MediumEnvironment Vars
MediumRemote Tarball Dependencypackage.json
LowScripts Present
LowEval
LowFilesystem
Low
Affected versions and remediation
This report applies to @tangle-network/sandbox-cli@0.21.65.
See all versions of @tangle-network/sandbox-cli for other recorded verdicts.
- Review the evidence and your use of @tangle-network/sandbox-cli@0.21.65 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.