registry / @taskless/cli-nightly / 0.13.4-20261028211351x0ca54ae
@taskless/cli-nightly@0.13.4-20261028211351x0ca54ae
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged credential and process activity is consistent with the CLI’s Taskless login and pinned launcher installation. Runtime telemetry is disclosed and can be disabled; the inspected source did not show an attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Authentication requests occur when the user invokes login; telemetry is emitted during CLI activity.
Impact
No unauthorized credential transfer or other malicious behavior was identified.
Mechanism
The CLI uses its configured Taskless API for device authorization and sends anonymous usage telemetry with an opt-out.
AI rationale
The flagged credential and process activity is consistent with the CLI’s Taskless login and pinned launcher installation. Runtime telemetry is disclosed and can be disabled; the inspected source did not show an attack.
Evidence
.taskless/taskless.json.taskless/.cache/
Network endpoints6
app.taskless.ioz.taskless.ioeu.i.posthog.comeu-assets.i.posthog.comus.i.posthog.comus-assets.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports dist/index.js as its main import and CLI entry point; no install lifecycle scripts are declared.
- The Taskless API URL defaults to https://app.taskless.io/cli; TASKLESS_API_URL and a saved Taskless config can override it.
- Device authorization sends a repository URL, when present, to the configured Taskless API for login.
- Runtime telemetry is disclosed and can be disabled with TASKLESS_TELEMETRY_DISABLED=1 or telemetry:false in .taskless/taskless.json.
- The launcher installs its pinned package with npm ci --ignore-scripts and removes the copied project .npmrc afterward.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.4-20261026181356xfcb2a39
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.4-20261026181356xfcb2a39
similarity = 0.571
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as zm } from "node:async_hooks";
L11: import { execFile as tn, spawn as Ht } from "node:child_process";
L12: import { R as te, T as gf, E as Me, a as He, b as we, L as Ae, i as nn } from "./index-QQC7OE4T.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as j, mkdir as V, writeFile as D, rm as Q, readdir as Y, stat as de, mkdtemp as er, copyFile as ka, glob as hf, access as pf, readlink as Dm, chmod as Mm, rename ...
import Gm, { createInterface as nr } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new h0(), this._events = new S0(), this._isInitialized = !1, w0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new pn(`Your project key or personal API key is invalid. Setting next polling interval to ${this.getPollingInterval()}ms. More information: https://posth...
throw this.beginB
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.4-20261028211351x0ca54ae.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.4-20261028211351x0ca54ae before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.