registry / @tsuga/cli / 1.89.0
@tsuga/cli@1.89.0
Tsuga CLI - manage resources from the command line
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe manifest exposes a CLI entry point without an install lifecycle hook. The suspicious process and network primitives are not evidence of malicious behavior, and the inspected agent telemetry setup is explicitly user-invoked and endpoint-configured.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the CLI’s Claude Code setup command.
Impact
No confirmed attack surface was established from the inspected source.
Mechanism
The command writes OTLP settings to Claude Code’s settings file, including the supplied endpoint and ingestion key; prompt and tool content logging can be disabled.
AI rationale
The manifest exposes a CLI entry point without an install lifecycle hook. The suspicious process and network primitives are not evidence of malicious behavior, and the inspected agent telemetry setup is explicitly user-invoked and endpoint-configured.
Evidence
.claude/settings.json
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the bundled CLI as the tsuga command and lists no install lifecycle hook.
- The CLI’s Claude Code setup command configures telemetry to a supplied OTLP endpoint and supports disabling prompt and tool content logging; this is explicit setup behavior.
Evidence against
- The bundle contains process execution and network requests, but inspection found no evidence that they form an unconsented attack path.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
16 flaggeddist/cli.jsView file
268patternName = github_pat
severity = critical
line = 268
Critical
268patternName = github_pat
severity = critical
line = 268
Critical
268patternName = github_oauth
severity = critical
line = 268
Critical
268patternName = github_server_token
severity = critical
line = 268
Critical
Findings
9 Critical7 High2 Medium4 Low
CriticalCritical Secretdist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
CriticalSecret Patterndist/cli.js
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltration
Affected versions and remediation
This report applies to @tsuga/cli@1.89.0.
See all versions of @tsuga/cli for other recorded verdicts.
- Review the evidence and your use of @tsuga/cli@1.89.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.