registry / @taskless/cli-nightly / 0.13.5-20261030163658x0b2ed45
@taskless/cli-nightly@0.13.5-20261030163658x0b2ed45
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged credential flow is the launcher copying the project's npm configuration for a pinned `npm ci --ignore-scripts` install, then removing the temporary copy. Taskless API credentials go to the Taskless API URL, and the disclosed telemetry can be disabled.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Normal CLI commands use the Taskless API; the launcher installs a pinned CLI version when first run for a project.
Impact
No unauthorized credential redirection or other concrete attack behavior was found.
Mechanism
The CLI reads Taskless login credentials and sends them to the Taskless API URL, which can be configured by the user. The launcher uses the project's npm configuration for its pinned install and disables dependency install scripts.
AI rationale
The flagged credential flow is the launcher copying the project's npm configuration for a pinned `npm ci --ignore-scripts` install, then removing the temporary copy. Taskless API credentials go to the Taskless API URL, and the disclosed telemetry can be disabled.
Evidence
.taskless/.env.local.json.taskless/.cachetemporary .npmrc~/.config/taskless/anonymous_id
Network endpoints4
app.taskless.io/cliz.taskless.iouser-configured Taskless API URLproject-configured npm registry
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest contains no install lifecycle hooks; its scripts are build and development commands.
- The CLI uses the Taskless API by default, and its bearer token is sent to the configured API URL.
- The token comes from TASKLESS_TOKEN or saved Taskless login data; login saves it locally.
- Telemetry is disclosed and has environment-variable and project-config opt-outs.
- The launcher copies the project's npm config only for a temporary npm ci install, disables install scripts, and removes the copied config afterward.
Evidence against
- The package includes network access, local credential storage, and subprocess execution, but the reviewed paths tie them to Taskless CLI functions and an explicitly invoked launcher.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.4-20261026181356xfcb2a39
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.4-20261026181356xfcb2a39
similarity = 0.571
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as Jm } from "node:async_hooks";
L11: import { execFile as tn, spawn as Ht } from "node:child_process";
L12: import { R as te, T as yf, E as Ue, a as Je, b as be, L as Te, i as nn } from "./index-QQC7OE4T.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as C, mkdir as q, writeFile as P, rm as Q, readdir as Y, stat as de, mkdtemp as er, copyFile as $a, glob as gf, access as mf, readlink as Bm, chmod as Vm, rename ...
import Hm, { createInterface as nr } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new m0(), this._events = new A0(), this._isInitialized = !1, k0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new pn(`Your project key or personal API key is invalid. Setting next polling interval to ${this.getPollingInterval()}ms. More information: https://posth...
throw this.beginB
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.5-20261030163658x0b2ed45.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.5-20261030163658x0b2ed45 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.