registry / Remote code execution / @taskless/cli-nightly / 0.11.1-20260904032807xf08fd11

@taskless/cli-nightly@0.11.1-20260904032807xf08fd11

Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package is not malicious by the inspected static evidence, but its remote-backed runtime-rule executor is a meaningful code-execution capability. It warrants a warning rather than a publication block because activation is user-commanded and lifecycle installation is absent.

Static reason

One or more suspicious static signals were detected.

Trigger

Run the taskless check command with authenticated runtime rules, or explicitly pass --dangerously-run-scripts.

Impact

Runtime rules can execute with the invoking user's project access; telemetry includes CLI and repository-owner metadata.

Mechanism

Dynamic import of runtime check.ts code after service reconciliation.

AI rationale

Evidence

dist/index.js.taskless/.run/runtime-rulescheck.ts

Network endpoints2

app.taskless.ioz.taskless.io

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The check feature dynamically imports and invokes project runtime-rule code.
Authenticated checks can copy server-approved runtime rules into the project before execution.
The CLI sends usage telemetry to a fixed Taskless endpoint.

Evidence against

package.json has no preinstall, install, or postinstall hook.
Runtime execution is skipped in anonymous mode and requires either authentication or an explicit dangerous flag.
The inspected credential flow uses the Taskless API default and stores tokens in a repository-local file with restrictive permissions.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

5 flagged

dist/recipes-o-WV5UrX.jsView file

172"severity": "error", L173: "message": "Avoid eval()", L174: "note": null,

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/recipes-o-WV5UrX.jsView on unpkg · L172

dist/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { mkdir as q, readFile as j, writeFile as P, rm as oe, readdir as de, stat as $e, mkdtemp as Aa, copyFile as qu, glob as Vu, access as Wu, readlink as Gu, rename as Ia, cp a... import { createReadStream as Ju, existsSync as di, readFileSync as Fa, globSync as Yu, mkdtempSync as Qu, writeFileSync as Xu, rmSync as Zu } from "node:fs"; import ef, { createInterface as qi } from "node:readline"; this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new th(), this._events = new fh(), this._isInitialized = !1, oh(e, "You must pass your PostHog project's ... throw this.beginBackoff(), new mt(`Your pro

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

Findings

3 High4 Medium6 Low

HighCredential Redirect Persistencedist/index.js

HighObfuscated Payload Loaderdist/index.js

HighSemantic Analysis Limitedassets/reference.json

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/recipes-o-WV5UrX.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Affected versions and remediation

This report applies to @taskless/cli-nightly@0.11.1-20260904032807xf08fd11.

See all versions of @taskless/cli-nightly for other recorded verdicts.

Review the evidence and your use of @taskless/cli-nightly@0.11.1-20260904032807xf08fd11 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-04 03:32:20.735Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Remote code execution / @taskless/cli-nightly / 0.11.1-20260904032807xf08fd11

@taskless/cli-nightly@0.11.1-20260904032807xf08fd11

Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

Run the taskless check command with authenticated runtime rules, or explicitly pass --dangerously-run-scripts.

Impact

Runtime rules can execute with the invoking user's project access; telemetry includes CLI and repository-owner metadata.

Mechanism

Dynamic import of runtime check.ts code after service reconciliation.

AI rationale

Evidence

dist/index.js.taskless/.run/runtime-rulescheck.ts

Network endpoints2

app.taskless.ioz.taskless.io

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The check feature dynamically imports and invokes project runtime-rule code.
Authenticated checks can copy server-approved runtime rules into the project before execution.
The CLI sends usage telemetry to a fixed Taskless endpoint.

Evidence against

package.json has no preinstall, install, or postinstall hook.
Runtime execution is skipped in anonymous mode and requires either authentication or an explicit dangerous flag.
The inspected credential flow uses the Taskless API default and stores tokens in a repository-local file with restrictive permissions.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

5 flagged

dist/recipes-o-WV5UrX.jsView file

172"severity": "error", L173: "message": "Avoid eval()", L174: "note": null,

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/recipes-o-WV5UrX.jsView on unpkg · L172

dist/index.jsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

Findings

3 High4 Medium6 Low

HighCredential Redirect Persistencedist/index.js

HighObfuscated Payload Loaderdist/index.js

HighSemantic Analysis Limitedassets/reference.json

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/recipes-o-WV5UrX.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Affected versions and remediation

This report applies to @taskless/cli-nightly@0.11.1-20260904032807xf08fd11.

See all versions of @taskless/cli-nightly for other recorded verdicts.

Review the evidence and your use of @taskless/cli-nightly@0.11.1-20260904032807xf08fd11 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-04 03:32:20.735Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.