registry / @tonbo/yield / 0.4.3
@tonbo/yield@0.4.3
Tonbo Yield: capture your agents' sessions on every machine and list them from any.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe scanner’s credential findings resolve to fake examples in redaction test vectors, while the runtime filters secrets from shared team capture and uses Tonbo service endpoints for the package’s documented features. No install hook or malicious credential redirection was found.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs the yield CLI; capture and sharing features operate as documented.
Impact
No malicious impact identified from the inspected source.
Mechanism
The CLI uses Tonbo services for its capture features. The flagged API key strings are fake redaction test inputs, and shared team capture filters secrets before upload.
AI rationale
The scanner’s credential findings resolve to fake examples in redaction test vectors, while the runtime filters secrets from shared team capture and uses Tonbo service endpoints for the package’s documented features. No install hook or malicious credential redirection was found.
Network endpoints4
api.tonbo.devstreams.tonbo.devgit.tonbo.devyield.tonbo.io
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI binary and declares no install lifecycle script.
- The API key examples flagged by the scanner are explicitly described as fake secrets in redaction test vectors.
- Shared team capture applies the secret filter to lines before they are uploaded.
- The README describes session capture and explains that sharing project sessions with team members requires confirmation.
Evidence against
- The CLI uses network services and reads a Tonbo login credential to provide its capture and account features.
- The README recommends a shell installer, and the CLI contains an install-script URL; the package manifest itself has no install hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/bin/yield.jsView file
5337patternName = github_pat
severity = critical
line = 5337
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/bin/yield.jsView on unpkg · L53375337patternName = github_pat
severity = critical
line = 5337
Critical
Secret Pattern
GitHub personal access token in dist/bin/yield.js
dist/bin/yield.jsView on unpkg · L5337•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/bin/yield.js:
import { mkdir as mkdir17, readFile as readFile23, stat as stat10, writeFile as writeFile6 } from "node:fs/promises";
import { createInterface as createInterface2 } from "node:readline/promises";
"description": "Where a client takes its credential, first match wins. A library takes an explicit option first; the CLIs have none. `env` is an API key of one account (TONBO_API_K...
headers: { authorization: `Bearer ${key}`, "content-type": "application/json" },
const headers = { authorization: `Bearer ${key}` };
await handle.writeFile(`${JSON.stringify(value, null, 2)}
await handle.writeFile(JSON.stringify(record3));
auth
High
Findings
2 Critical1 High2 Medium7 Low
CriticalCritical Secretdist/bin/yield.js
CriticalSecret Patterndist/bin/yield.js
HighCredential Redirect Persistencedist/bin/yield.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/bin/yield.js
LowAi Review Evidencedist/bin/yield.js
Affected versions and remediation
This report applies to @tonbo/yield@0.4.3.
See all versions of @tonbo/yield for other recorded verdicts.
- Review the evidence and your use of @tonbo/yield@0.4.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.