registry / @taskless/cli-nightly / 0.13.3-20261021073724x98dfa99
@taskless/cli-nightly@0.13.3-20261021073724x98dfa99
⚠ Under reviewNightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected package source does not establish malicious behavior, and the manifest has no install lifecycle hook. Platform-specific executable dependencies are declared and used, but their source was unavailable in the inspected snapshot, leaving their behavior unresolved.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI analysis command that invokes ast-grep.
Impact
The behavior of those dependencies cannot be verified from this snapshot, so a clean assessment is not supported.
Mechanism
The CLI launches the ast-grep executable; the inspected snapshot does not include source for the declared platform-specific executable dependencies.
AI rationale
The inspected package source does not establish malicious behavior, and the manifest has no install lifecycle hook. Platform-specific executable dependencies are declared and used, but their source was unavailable in the inspected snapshot, leaving their behavior unresolved.
Evidence
package.jsondist/index.js
Decision evidence
public snapshotAI called this Manual Review at 74.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares platform-specific ast-grep and Vale optional dependencies, and the CLI launches ast-grep for scans; source for those platform packages was not available in the inspected snapshot.
- The inspected tsx dependency manifest exposes a loader entrypoint, and its loader imports its runtime modules.
Evidence against
- The package manifest contains no install lifecycle hook, and the inspected source does not establish a concrete attack.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.3-20261021055449x566b238
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.3-20261021055449x566b238
similarity = 0.929
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as zg } from "node:async_hooks";
L11: import { execFile as Kt, spawn as dt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as Kg, ENGINES as Ve, ENGINE_LAYOUTS as Et, RULE_TESTS_DIRECTORY as me, isKnownEngine as Ht } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as C, mkdir as K, writeFile as D, rm as ne, readdir as H, stat as ye, mkdtemp as ea, copyFile as Ru, glob as Lu, access as Ng, readlink as Fg, chmod as Cg, rename...
import { createReadStream as Bg, globSync as na, readdirSync as Vg, existsSync as Xn, readFileSync as xu, rmSync as Nu, mkdtempSync as qg, writeFileSync as Wg } from "node:fs";
import Gg, { createInterface as as } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new f0(), this._events = new k0(), this._isInitialized = !1, m0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Dependency Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.3-20261021073724x98dfa99.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.3-20261021073724x98dfa99 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.