registry / @tonbo/yield / 0.5.1
@tonbo/yield@0.5.1
Tonbo Yield: capture your agents' sessions on every machine and list them from any.
AI Security Review
scanned 12h ago · by lpm-firewall-aiThe package is a user-invoked session-capture CLI with no declared install lifecycle hook. The concerning credential and shell matches resolve to a redaction fixture and manual upgrade text, while the inspected API origin belongs to Tonbo.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runs when a user invokes `yield`; no install hook is declared.
Impact
No unsolicited credential transfer, unrelated collection, or automatic download execution was identified.
Mechanism
The inspected source uses Tonbo service endpoints and includes a manual upgrade command as error-message text. The flagged Anthropic key is fixture data paired with redacted output.
AI rationale
The package is a user-invoked session-capture CLI with no declared install lifecycle hook. The concerning credential and shell matches resolve to a redaction fixture and manual upgrade text, while the inspected API origin belongs to Tonbo.
Network endpoints3
api.tonbo.devstreams.tonbo.devyield.tonbo.io
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a `yield` CLI and declares build, lint, and test scripts, with no install lifecycle hook.
- The credential-looking Anthropic value appears in a bundled redaction example: the sample input is paired with output that redacts the key and JWT.
- The default API origin is the package's Tonbo service, `https://api.tonbo.dev`.
- The download-and-run string appears in an error message recommending a manual service upgrade; it is not executed by the package.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/bin/yield.jsView file
5979patternName = github_pat
severity = critical
line = 5979
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/bin/yield.jsView on unpkg · L59795979patternName = github_pat
severity = critical
line = 5979
Critical
Secret Pattern
GitHub personal access token in dist/bin/yield.js
dist/bin/yield.jsView on unpkg · L5979•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/bin/yield.js:
import { mkdir as mkdir17, readFile as readFile24, realpath as realpath12, stat as stat12, writeFile as writeFile8 } from "node:fs/promises";
import { createInterface as createInterface2 } from "node:readline/promises";
"description": "Where a client takes its credential, first match wins. A library takes an explicit option first; the CLIs have none. `env` is an API key of one account (TONBO_API_K...
headers: { authorization: `Bearer ${key}`, "content-type": "application/json" },
const headers = { authorization: `Bearer ${key}` };
await handle.writeFile(`${JSON.stringify(value, null, 2)}
await handle.writeFile(JSON.s
High
Findings
2 Critical1 High2 Medium7 Low
CriticalCritical Secretdist/bin/yield.js
CriticalSecret Patterndist/bin/yield.js
HighCredential Redirect Persistencedist/bin/yield.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/bin/yield.js
LowAi Review Evidencedist/bin/yield.js
Affected versions and remediation
This report applies to @tonbo/yield@0.5.1.
See all versions of @tonbo/yield for other recorded verdicts.
- Review the evidence and your use of @tonbo/yield@0.5.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.