registry / @tonbo/yield / 0.5.2
@tonbo/yield@0.5.2
Tonbo Yield: capture your agents' sessions on every machine and list them from any.
AI Security Review
scanned 13h ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the flagged key strings are explicitly fake test vectors. The runtime metrics are described as content-free, disclosed in the README and configurable off; credential use is tied to Tonbo accounts and services.
Static reason
One or more suspicious static signals were detected.
Trigger
CLI commands and the capture service; metrics are sent for documented events and can be disabled with TONBO_YIELD_METRICS=off.
Impact
No unauthorized credential transfer or unrelated destructive action was found.
Mechanism
The CLI uses Tonbo credentials with Tonbo services. The flagged secret patterns are fake test data, and the install command appears as documented setup or upgrade guidance.
AI rationale
The manifest has no install lifecycle hook, and the flagged key strings are explicitly fake test vectors. The runtime metrics are described as content-free, disclosed in the README and configurable off; credential use is tied to Tonbo accounts and services.
Network endpoints5
api.tonbo.devstreams.tonbo.devgit.tonbo.devregistry.npmjs.orgyield.tonbo.io
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI entry point and declares build, lint and test scripts; it has no install lifecycle hook.
- Authentication uses a Tonbo API key or the saved Tonbo CLI login for the account the command acts in.
- The apparent secret strings occur in filter test vectors explicitly described as fake secrets.
- The README discloses the content-free runtime metrics, their retention and how to disable them.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/bin/yield.jsView file
5979patternName = github_pat
severity = critical
line = 5979
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/bin/yield.jsView on unpkg · L59795979patternName = github_pat
severity = critical
line = 5979
Critical
Secret Pattern
GitHub personal access token in dist/bin/yield.js
dist/bin/yield.jsView on unpkg · L5979•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/bin/yield.js:
import { mkdir as mkdir17, readFile as readFile24, realpath as realpath12, stat as stat12, writeFile as writeFile8 } from "node:fs/promises";
import { createInterface as createInterface2 } from "node:readline/promises";
"description": "Where a client takes its credential, first match wins. A library takes an explicit option first; the CLIs have none. `env` is an API key of one account (TONBO_API_K...
headers: { authorization: `Bearer ${key}`, "content-type": "application/json" },
const headers = { authorization: `Bearer ${key}` };
await handle.writeFile(`${JSON.stringify(value, null, 2)}
await handle.writeFile(JSON.s
High
Findings
2 Critical1 High2 Medium7 Low
CriticalCritical Secretdist/bin/yield.js
CriticalSecret Patterndist/bin/yield.js
HighCredential Redirect Persistencedist/bin/yield.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/bin/yield.js
LowAi Review Evidencedist/bin/yield.js
Affected versions and remediation
This report applies to @tonbo/yield@0.5.2.
See all versions of @tonbo/yield for other recorded verdicts.
- Review the evidence and your use of @tonbo/yield@0.5.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.