registry / @tsuga/cli / 1.34.0
@tsuga/cli@1.34.0
Tsuga CLI - manage resources from the command line
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe flagged agent configuration code is reached through explicit CLI setup, and the manifest has no npm install hook. It configures the Tsuga marketplace plugin, with Claude auto-update opt-out available.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the `install plugin claude-code` or `install plugin codex` subcommand.
Impact
The inspected behavior installs or updates the package’s own agent plugin; no malicious behavior was established.
Mechanism
The CLI invokes the installed agent CLI to add the Tsuga plugin; Claude setup can also update the user’s Claude settings to enable automatic plugin updates.
AI rationale
The flagged agent configuration code is reached through explicit CLI setup, and the manifest has no npm install hook. It configures the Tsuga marketplace plugin, with Claude auto-update opt-out available.
Evidence
dist/cli.js
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/cli.js as the CLI entry point and declares no npm install lifecycle hook.
- Plugin installation is invoked through explicit `install plugin` CLI subcommands and calls the locally installed Claude or Codex CLI.
- Claude setup adds the Tsuga GitHub marketplace plugin and offers an opt-out for setting its auto-update preference.
- Claude auto-update configuration writes the Tsuga marketplace entry to the user’s Claude settings file; Codex setup uses its plugin CLI.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
17 flaggeddist/cli.jsView file
53patternName = github_pat
severity = critical
line = 53
Critical
53patternName = github_pat
severity = critical
line = 53
Critical
53patternName = github_oauth
severity = critical
line = 53
Critical
53patternName = github_server_token
severity = critical
line = 53
Critical
Findings
9 Critical8 High3 Medium4 Low
CriticalCritical Secretdist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
Affected versions and remediation
This report applies to @tsuga/cli@1.34.0.
See all versions of @tsuga/cli for other recorded verdicts.
- Review the evidence and your use of @tsuga/cli@1.34.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.