registry / @tonbo/yield / 0.3.4
@tonbo/yield@0.3.4
Tonbo Yield: capture your agents' sessions on every machine and list them from any.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe credential-redirection and secret-pattern alerts are not borne out by the source: the apparent secrets are fake test fixtures, and the access-token flow sends Tonbo credentials to the configured Tonbo origin. The manifest has no install lifecycle hook, and the CLI's network activity matches its documented session-capture purpose.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runs when the user invokes the yield command; login and capture setup are user-initiated.
Impact
No malicious impact was identified in the reviewed source.
Mechanism
It uses the configured Tonbo API origin and exchanges Tonbo credentials for audience-specific Streams or Git access tokens.
AI rationale
The credential-redirection and secret-pattern alerts are not borne out by the source: the apparent secrets are fake test fixtures, and the access-token flow sends Tonbo credentials to the configured Tonbo origin. The manifest has no install lifecycle hook, and the CLI's network activity matches its documented session-capture purpose.
Evidence
package.jsondist/bin/yield.jsREADME.md
Network endpoints6
api.tonbo.devtonbo.dev/api/iam/tokenstreams.tonbo.devgit.tonbo.devregistry.npmjs.org/@tonbo/yield/latestyield.tonbo.io/install.sh
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and declares no install, preinstall, or postinstall lifecycle hook.
- The API origin defaults to Tonbo; a different origin must be explicitly supplied through TONBO_API_ORIGIN and pass HTTPS validation.
- The access-token exchange sends a Tonbo login key to the configured Tonbo user origin for a Streams or Git audience.
- The credential-looking strings in the bundle are test fixtures explicitly described as fake secrets.
- The executable parses the user's CLI arguments at startup; the README describes session capture and recall as the package's purpose.
Evidence against
- The package reads its own Tonbo login key or TONBO_API_KEY for Tonbo API operations; the reviewed flow does not redirect Anthropic or OpenAI credentials.
- Session capture and uploads are core documented functionality, and no unrelated collector or concealed automatic action was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggeddist/bin/yield.jsView file
3542patternName = github_pat
severity = critical
line = 3542
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/bin/yield.jsView on unpkg · L35423542patternName = github_pat
severity = critical
line = 3542
Critical
Secret Pattern
GitHub personal access token in dist/bin/yield.js
dist/bin/yield.jsView on unpkg · L3542•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/bin/yield.js:
import { createInterface } from "node:readline/promises";
await handle.writeFile(`${JSON.stringify(login, null, 2)}
const authorization = new URL("/cli/login", this.loginOrigin);
authorization.search = new URLSearchParams({
return authorization.toString();
listenForCode(expectedState, authorizationUrl, progress2) {
let authorizationStarted = false;
const startAuthorization = (browserOpened = true) => {
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
Findings
2 Critical2 High3 Medium5 Low
CriticalCritical Secretdist/bin/yield.js
CriticalSecret Patterndist/bin/yield.js
HighCredential Redirect Persistencedist/bin/yield.js
HighSandbox Evasion Gated Capabilitydist/bin/yield.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @tonbo/yield@0.3.4.
See all versions of @tonbo/yield for other recorded verdicts.
- Review the evidence and your use of @tonbo/yield@0.3.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.