registry / @taskless/cli-nightly / 0.13.4-20261022195405x50b7ee6
@taskless/cli-nightly@0.13.4-20261022195405x50b7ee6
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 13d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or confirmed attack behavior. The flagged network use aligns with Taskless telemetry and authentication, and the launcher uses npm with scripts disabled while removing its temporary npm configuration copy.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI or explicitly invoking its login command.
Impact
No confirmed unauthorized credential transfer, destructive behavior, or install-time attack was established.
Mechanism
Login requests use the Taskless API URL, which defaults to the Taskless service; telemetry checks opt-out settings before initialization.
AI rationale
Source inspection found no install lifecycle hook or confirmed attack behavior. The flagged network use aligns with Taskless telemetry and authentication, and the launcher uses npm with scripts disabled while removing its temporary npm configuration copy.
Evidence
package.jsondist/index.js.lpm-dependency-evidence-2cd20a6f-32f2-4b57-9107-9b2001fffcaf/0/npm-linux/package.json.lpm-dependency-evidence-2cd20a6f-32f2-4b57-9107-9b2001fffcaf/0/npm-linux/dist/loader.mjs.lpm-dependency-evidence-2cd20a6f-32f2-4b57-9107-9b2001fffcaf/1/npm-linux/package.json.lpm-dependency-evidence-2cd20a6f-32f2-4b57-9107-9b2001fffcaf/2/npm-linux/package.json
Network endpoints2
z.taskless.ioapp.taskless.io/cli
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI entry point and lists no install lifecycle hook.
- Telemetry can be disabled through environment settings or project configuration; its collector is the Taskless endpoint.
- The API URL defaults to Taskless and can be changed through explicit environment or configuration settings; login uses it for device authorization and token polling.
- The inspected tsx and platform-specific ast-grep manifests and tsx loader show ordinary dependency metadata and loader behavior.
Evidence against
- The launcher temporarily copies project npm configuration for installation, but removes it afterward and runs npm with lifecycle scripts ignored.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.3-20261021190126x85025cb
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.3-20261021190126x85025cb
similarity = 0.929
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as hm } from "node:async_hooks";
L11: import { execFile as Xt, spawn as wt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as Ju, ENGINES as Ge, ENGINE_LAYOUTS as Ot, RULE_TESTS_DIRECTORY as we, isKnownEngine as Zt } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { createReadStream as Xg, globSync as pi, readdirSync as Zg, existsSync as En, readFileSync as Bu, rmSync as Vu, mkdtempSync as em, writeFileSync as tm } from "node:fs";
import { readFile as P, mkdir as z, writeFile as U, rm as ne, readdir as J, stat as de, mkdtemp as ha, copyFile as Ku, glob as zu, access as Hu, readlink as rm, chmod as om, rename...
import dm, { createInterface as ds } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new L0(), this._events = new B0(), this._isInitialized = !1, j0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.4-20261022195405x50b7ee6.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.4-20261022195405x50b7ee6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.