registry / @taskless/cli-nightly / 0.13.4-20261024003540xfa2ac04
@taskless/cli-nightly@0.13.4-20261024003540xfa2ac04
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe flagged network and process calls match Taskless authentication, disclosed opt-out telemetry, and a project launcher that uses a locked CLI version with dependency scripts disabled. Source inspection found no concrete malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; device authorization runs when the user invokes login.
Impact
No unrelated credential transfer or unattended malicious change was established.
Mechanism
Authentication uses the Taskless service by default. The CLI also sends usage metadata to Taskless telemetry, with environment and configuration opt-outs.
AI rationale
The flagged network and process calls match Taskless authentication, disclosed opt-out telemetry, and a project launcher that uses a locked CLI version with dependency scripts disabled. Source inspection found no concrete malicious behavior.
Network endpoints2
app.taskless.ioz.taskless.io
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI through dist/index.js and lists no install lifecycle hook; its runtime dependency is tsx.
- Login is an explicit Taskless authentication command. Its default service is Taskless, and a custom endpoint comes from the environment or existing configuration.
- The login flow uses device authorization and stores the returned token after successful authorization; no unrelated credential recipient was found.
- Telemetry goes to a Taskless host, has effective environment and configuration opt-outs, and sends CLI metadata that can include the GitHub owner and repository context.
- The project launcher installs the version recorded for that project with package scripts disabled, removes its temporary npm configuration copy, and runs that recorded CLI.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetry
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.4-20261023150811x3b28ed5
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.4-20261023150811x3b28ed5
similarity = 0.929
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as km } from "node:async_hooks";
L11: import { execFile as tn, spawn as bt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as ef, ENGINES as Ke, ENGINE_LAYOUTS as Lt, RULE_TESTS_DIRECTORY as we, isKnownEngine as nn } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { createReadStream as om, globSync as yi, readdirSync as Gu, existsSync as yt, statSync as am, readFileSync as Ku, rmSync as zu, mkdtempSync as lm, writeFileSync as cm } fro...
import { readFile as P, mkdir as H, writeFile as U, rm as se, readdir as J, stat as de, mkdtemp as ma, copyFile as Qu, glob as Xu, access as Zu, readlink as hm, chmod as pm, rename...
import vm, { createInterface as ps } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new V0(), this._events = new X0(), this._isInitialized = !1, z0(t, "You must pass your PostHog project's ...
throw this.beginB
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.4-20261024003540xfa2ac04.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.4-20261024003540xfa2ac04 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.