registry / @tsuga/cli / 1.56.0
@tsuga/cli@1.56.0
Tsuga CLI - manage resources from the command line
AI Security Review
scanned 29d ago · by lpm-firewall-aiSource inspection found no install hook. The API URL validation and explicit plugin-install command support package-aligned behavior, so the static credential and agent-configuration signals do not establish an attack.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs Tsuga API commands or explicitly invokes the plugin installation command.
Impact
No confirmed malicious effect; a user can choose to install the Tsuga agent plugin and enable its automatic updates.
Mechanism
The CLI authenticates requests to its API URL; plugin installation invokes Claude or Codex CLI commands, with Claude auto-update configuration written during that explicit setup.
AI rationale
Source inspection found no install hook. The API URL validation and explicit plugin-install command support package-aligned behavior, so the static credential and agent-configuration signals do not establish an attack.
Evidence
.claude/settings.json
Network endpoints2
api.tsuga.comapi.tsuga-staging.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a CLI executable and declares no install lifecycle hook.
- The API URL validator limits configuration to Tsuga API domains or local hosts.
- API requests send the selected Tsuga credential to the resolved API URL.
- Plugin setup is exposed as an explicit install command and can enable Claude marketplace auto-updates.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
13 flaggeddist/cli.jsView file
240patternName = github_pat
severity = critical
line = 240
Critical
240patternName = github_pat
severity = critical
line = 240
Critical
240patternName = github_oauth
severity = critical
line = 240
Critical
240patternName = github_server_token
severity = critical
line = 240
Critical
Findings
9 Critical4 High2 Medium4 Low
CriticalCritical Secretdist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighSecret Patterndist/cli.js
HighSecret Patterndist/cli.js
HighSecret Patterndist/cli.js
Affected versions and remediation
This report applies to @tsuga/cli@1.56.0.
See all versions of @tsuga/cli for other recorded verdicts.
- Review the evidence and your use of @tsuga/cli@1.56.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.