registry / @taskless/cli-nightly / 0.13.3-20261021055913xfd43069
@taskless/cli-nightly@0.13.3-20261021055913xfd43069
⚠ Under reviewNightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected login behavior is a user-invoked Taskless device authorization flow, and the scanner’s fixed-gateway credential claim was not supported by the source reviewed. Some optional platform engine dependencies remained unresolved or metadata-only, and the package source shows those engines can be selected at runtime, so a clean verdict is not supported.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command that invokes an ast-grep or Vale engine.
Impact
The behavior of those selected binaries remains unverified, so the package cannot be cleared as clean from this snapshot.
Mechanism
The bundled resolver selects a platform binary and runs it for an identity check; the selected binary source could not be fully inspected.
AI rationale
The inspected login behavior is a user-invoked Taskless device authorization flow, and the scanner’s fixed-gateway credential claim was not supported by the source reviewed. Some optional platform engine dependencies remained unresolved or metadata-only, and the package source shows those engines can be selected at runtime, so a clean verdict is not supported.
Evidence
package.jsondist/binary-DjHxJ_El.js
Decision evidence
public snapshotAI called this Manual Review at 70.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes a CLI entrypoint and lists build and development scripts; no npm lifecycle hook is declared.
- Login requests a device code from the configured Taskless API, polls with that device code, and saves the returned token locally.
- Telemetry can be disabled through environment variables or repository configuration; its inspected payload includes CLI and repository or organization metadata.
- The manifest declares optional platform engine binaries, and the bundled resolver locates a platform package and executes a found binary for an identity check; selected binary source was not fully reviewable in this snapshot.
Evidence against
- The inspected login flow does not send an existing saved token to an unrelated fixed gateway.
- No install-time attack or concrete malicious behavior was established in the inspected package source.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.0-20261016182619x41fd794
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.0-20261016182619x41fd794
similarity = 0.857
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as Vg } from "node:async_hooks";
L11: import { execFile as Ht, spawn as ft } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as qg, ENGINES as Ve, ENGINE_LAYOUTS as $t, RULE_TESTS_DIRECTORY as me, isKnownEngine as Jt } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as C, mkdir as G, writeFile as D, rm as ne, readdir as H, stat as Ee, mkdtemp as Xo, copyFile as Au, glob as Tu, access as Og, readlink as Rg, chmod as Lg, rename...
import { createReadStream as Pg, globSync as ea, readdirSync as Dg, existsSync as es, readFileSync as Iu, rmSync as Ou, mkdtempSync as Mg, writeFileSync as Ug } from "node:fs";
import Bg, { createInterface as ls } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new a0(), this._events = new y0(), this._isInitialized = !1, d0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.3-20261021055913xfd43069.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.3-20261021055913xfd43069 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.