registry / @todoforai/cli / 0.1.39

@todoforai/cli@0.1.39

⚠ Under review

CLI for [TODOforAI](https://todofor.ai) — create, watch, and inspect AI-powered todos.

Static Scan Results

scanned 25d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

NoLicense

scanned 2 file(s), 1.94 MB of source, external domains: api.todofor.ai, github.com, linkedin.com, registry.npmjs.org, todofor.ai, www.ibm.com, www.linkedin.com, www.w3.org, x.com

Source & flagged code

6 flagged

dist/todoforai-cli.jsView file

295if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L296: chars += String.fromCharCode(lineHash[line]); L297: } else { ... L1905: } L1906: exec(s) { L1907: this.matcherRe.lastIndex = this.lastIndex; ... L2075: props: ["language", "code", "autodetect"], L2076: data: function() { L2077: return { ... L2273: deprecated("10.7.0", `Please use highlight(code, options) instead. L2274: https://github.com/highlightjs/highlight.js/issues/2277`); L2275: languageName = codeOrlanguageName;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/todoforai-cli.jsView on unpkg · L295

1905} L1906: exec(s) { L1907: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/todoforai-cli.jsView on unpkg · L1905

26069L26070: // node_modules/highlight.js/lib/languages/powershell.js L26071: var require_powershell = __commonJS((exports, module) => {

High

Shell

Package source references shell execution.

dist/todoforai-cli.jsView on unpkg · L26069

47264`)[0].slice(0, 100); L47265: process.stdout.write(`${sc}${status.padEnd(statusW)}${RESET} ${DIM}${ts}${RESET} ${t.id} ${title} L47266: `); ... L47275: // src/isolated.ts L47276: import { spawn as spawn2 } from "child_process"; L47277: async function mintMayflyToken(apiUrl, apiKey, todoId) { L47278: const res = await fetch(`${apiUrl}${restBasePath(apiKey)}/cli/mayfly/token`, { L47279: method: "POST",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/todoforai-cli.jsView on unpkg · L47264

26573keyword: "and case default else elsif false if in import enherits node or true undef unless main settings $string ", L26574: literal: "alias audit before loglevel noop require subscribe tag " + "owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_dif... L26575: built_in: "architecture augeasversion blockdevices boardmanufacturer boardproductname boardserialnumber cfkey dhcp_servers " + "domain ec2_ ec2_userdata facterversion filesystems l... ... L42698: try { L42699: cache = JSON.parse(fs.readFileSync(cacheFile, "utf8")); L42700: } catch {} ... L44854: // src/ensure-bridge.ts L44855: import { spawn, spawnSync } from "child_process"; L44856: import fs2 from "fs";

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/todoforai-cli.jsView on unpkg · L26573

bin/todoforai-cli.jsView file

Lines 1-10javascript

1#!/usr/bin/env bun

2// Dev (linked repo): run src directly so there is no stale-build step.

3// Published package ships only dist/ (the @shared/* file: deps are bundled in).

4import { existsSync } from "node:fs";

5import { fileURLToPath } from "node:url";

7const src

Source & flagged code

6 flagged · loading source

dist/todoforai-cli.jsView file

@todoforai/cli@0.1.39

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code