registry / @vectoree/cli / 0.1.17
@vectoree/cli@0.1.17
Official Vectoree CLI — login, link, database, storage, Model Gateway, and Tool Hub
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged behavior is explained by documented CLI functions: authenticated requests go to the configured Vectoree API, and machine identification occurs as part of the explicit project-link flow. I found no install hook or unrelated command-output exfiltration behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User invokes a CLI command; project-link metadata is collected during the explicit link flow.
Impact
Expected CLI requests and project linking; no evidence of unrelated credential collection or command-output exfiltration.
Mechanism
Commands make authenticated API requests to the configured Vectoree API. The link flow sends a machine identifier and hostname label to create a project API key.
AI rationale
The flagged behavior is explained by documented CLI functions: authenticated requests go to the configured Vectoree API, and machine identification occurs as part of the explicit project-link flow. I found no install hook or unrelated command-output exfiltration behavior.
Evidence
.vectoree/config.json~/.vectoree/device-id
Network endpoints1
vectoree.ai (default API origin; configurable via VECTOREE_API_URL or --api-url)
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package has no install lifecycle scripts; its executable is the documented Vectoree CLI.
- API credentials are sent as Bearer tokens through requests to the configured Vectoree API origin.
- The machine ID and hostname are included when the user runs the project-link flow to create a CLI API key.
- App Auth snippets are generated and printed only when the user invokes the snippet command.
Evidence against
- The CLI entry point parses command-line arguments; no hidden install or startup task was identified.
- The apparent command-output and network patterns are consistent with CLI functionality and generated integration examples.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @vectoree/cli@0.1.9
matchedIdentity = npm:QHZlY3RvcmVlL2NsaQ:0.1.9
similarity = 0.667
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg149// src/device-id.ts
L150: import { execFileSync } from "child_process";
L151: import { randomUUID } from "crypto";
High
136if (!getGlobalFlags().json) {
L137: process.stderr.write(`${message}
L138: `);
...
L143: import { createHash, randomBytes } from "crypto";
L144: import http from "http";
L145: import { URL as URL2 } from "url";
...
L149: // src/device-id.ts
L150: import { execFileSync } from "child_process";
L151: import { randomUUID } from "crypto";
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShell
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumSecret Patterndist/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @vectoree/cli@0.1.17.
See all versions of @vectoree/cli for other recorded verdicts.
- Review the evidence and your use of @vectoree/cli@0.1.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.