registry / @taskless/cli-nightly / 0.13.3-20261021085748x8de568f
@taskless/cli-nightly@0.13.3-20261021085748x8de568f
⚠ Under reviewNightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected CLI source uses a Taskless API default that can be overridden by caller configuration, and the manifest has no npm install hook. Prepared evidence marks optional platform-specific packages unresolved, so their behavior cannot be cleared from source; this warrants manual review without establishing an attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
No malicious trigger was established; the unresolved dependency behavior would depend on installing or using a matching platform package.
Impact
No concrete attack impact was established; unresolved dependency behavior prevents a clean conclusion.
Mechanism
The available evidence does not reveal what the unresolved platform-specific packages do.
AI rationale
The inspected CLI source uses a Taskless API default that can be overridden by caller configuration, and the manifest has no npm install hook. Prepared evidence marks optional platform-specific packages unresolved, so their behavior cannot be cleared from source; this warrants manual review without establishing an attack.
Evidence
package.jsondist/index.js
Decision evidence
public snapshotAI called this Manual Review at 71.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json points to dist/index.js and declares tsx as its runtime dependency.
- dist/index.js reads the Taskless API URL from caller configuration or uses the Taskless service default.
- The inspected tsx manifest and loader identify a TypeScript runtime entrypoint.
- The prepared dependency evidence leaves optional platform-specific packages unresolved, so their behavior could not be assessed from source.
Evidence against
- The manifest has no npm install lifecycle hook.
- The inspected source does not establish credential theft or another concrete attack.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.3-20261021055449x566b238
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.3-20261021055449x566b238
similarity = 0.929
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as Yg } from "node:async_hooks";
L11: import { execFile as Jt, spawn as pt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as Bu, ENGINES as qe, ENGINE_LAYOUTS as Et, RULE_TESTS_DIRECTORY as me, isKnownEngine as Yt } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { createReadStream as Fg, globSync as ra, readdirSync as Cg, existsSync as Sn, readFileSync as Fu, rmSync as Cu, mkdtempSync as jg, writeFileSync as Pg } from "node:fs";
import { readFile as C, mkdir as K, writeFile as M, rm as ne, readdir as H, stat as we, mkdtemp as oa, copyFile as Du, glob as Mu, access as Uu, readlink as Vg, chmod as qg, rename...
import Jg, { createInterface as as } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new p0(), this._events = new E0(), this._isInitialized = !1, b0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Dependency Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.3-20261021085748x8de568f.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.3-20261021085748x8de568f before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.