registry / @taskless/cli-nightly / 0.13.4-20261028215052x01251d2
@taskless/cli-nightly@0.13.4-20261028215052x01251d2
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe credential flow targets the configured Taskless service, which defaults to app.taskless.io. The added launcher installs a pinned Taskless package with npm scripts disabled and is generated through the user-invoked init flow.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI commands make service requests; the launcher installs a missing pinned CLI when a user runs it, and init creates launcher files after its confirmation step.
Impact
The observed behavior is consistent with the package’s CLI and launcher functions; no unrelated credential redirect or automatic install-time action was found.
Mechanism
The CLI sends its bearer token to the configured Taskless API URL, defaulting to app.taskless.io. The launcher uses the project’s npm configuration to install the recorded package version with npm ci --ignore-scripts.
AI rationale
The credential flow targets the configured Taskless service, which defaults to app.taskless.io. The added launcher installs a pinned Taskless package with npm scripts disabled and is generated through the user-invoked init flow.
Network endpoints6
app.taskless.io/cliregistry.npmjs.orgus.i.posthog.comus-assets.i.posthog.comeu.i.posthog.comeu-assets.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI and lists build and generation scripts; no install lifecycle script is declared.
- The CLI uses app.taskless.io by default and accepts an API URL from the environment or its config file.
- The CLI sends its bearer token to the API client using that resolved service URL.
- On a cache miss, the project launcher copies the project’s npm configuration and runs npm ci with install scripts disabled.
- The launcher requires a recorded package version and starts that version; its files are created by the interactive init flow, which can be cancelled.
- The feedback recipe tells the user to review the payload and explicitly approve before sending.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.4-20261026181356xfcb2a39
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.4-20261026181356xfcb2a39
similarity = 0.571
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as zm } from "node:async_hooks";
L11: import { execFile as tn, spawn as Ht } from "node:child_process";
L12: import { R as te, T as gf, E as Me, a as He, b as we, L as Ae, i as nn } from "./index-QQC7OE4T.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as j, mkdir as V, writeFile as D, rm as Q, readdir as Y, stat as de, mkdtemp as er, copyFile as ka, glob as hf, access as pf, readlink as Dm, chmod as Mm, rename ...
import Gm, { createInterface as nr } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new h0(), this._events = new S0(), this._isInitialized = !1, w0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new pn(`Your project key or personal API key is invalid. Setting next polling interval to ${this.getPollingInterval()}ms. More information: https://posth...
throw this.beginB
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.4-20261028215052x01251d2.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.4-20261028215052x01251d2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.