registry / @vercel/cli-support / 65.3.1
@vercel/cli-support@65.3.1
⚠ Under reviewThe JavaScript Vercel CLI, installed by `vercel` where no native binary is available
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected code shows Vercel-aligned authentication and CLI setup behavior, without evidence of an attack. The agent-configuration behavior and broader runtime paths remain unresolved, so a clean or warning verdict is not supported by this inspection.
Static reason
One or more suspicious static signals were detected.
Trigger
Unresolved; the reviewed excerpts do not establish an activating action for harmful behavior.
Impact
No confirmed attack impact was identified; broader behavior remains unresolved.
Mechanism
The examined code shows CLI setup, Vercel authentication requests, and plugin-registry reading; it does not establish malicious effects.
AI rationale
The inspected code shows Vercel-aligned authentication and CLI setup behavior, without evidence of an attack. The agent-configuration behavior and broader runtime paths remain unresolved, so a clean or warning verdict is not supported by this inspection.
Evidence
dist/chunks/chunk-PFPJLIFF.jsdist/commands-core.js
Network endpoints2
api.vercel.comVercel SSO API endpoint
Decision evidence
public snapshotAI called this Manual Review at 52.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json identifies this as Vercel's JavaScript CLI package.
- The inspected plugin code reads Claude's installed-plugin registry; the excerpt does not establish what other setup code changes.
- The inspected core excerpt writes Vercel best-practices content to a target file, but does not establish how that target is selected or how the command is activated.
- The inspected AI setup path can recover a saved key, while the shown output path prints a newly created key only under specific conditions.
- The inspected OIDC refresh sends a bearer token to the Vercel API; the OpenAPI SSO request sends a Vercel token in a cookie to the SSO endpoint.
Evidence against
- The reviewed excerpts do not establish credential transfer to an unrelated recipient or unconsented installation-time behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
12 flaggeddist/commands-blob.jsView file
8patternName = private_key_rsa
severity = critical
line = 8
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/commands-blob.jsView on unpkg · L88patternName = private_key_rsa
severity = critical
line = 8
Critical
dist/commands-ai.jsView file
55`}}],envExports:[{name:GATEWAY_API_KEY_ENV,value:ctx.apiKey}],notes:[`Mistral Vibe will default to ${activeModel} through the gateway; switch with /model.`,...models3.length?[`${mo...
L56: ${import_chalk19.default.dim(" Detected agents are pre-selected \xB7")}${CHECKBOX_INSTRUCTIONS}`,instructions:!1,loop:!1,pageSize:Math.max(choices.length,7),choices})).map(id=>get...
L57: `)}function preservedEnvLines(current,writtenNames){if(!current)return[];let start=current.indexOf(MANAGED_BLOCK_START),end=current.indexOf(MANAGED_BLOCK_END);if(start===-1||end===...
Findings
2 Critical8 High4 Medium6 Low
CriticalCritical Secretdist/commands-blob.js
CriticalSecret Patterndist/commands-blob.js
HighChild Processdist/commands-ai.js
HighShell
HighSame File Env Network Executiondist/commands-ai.js
HighHost Fingerprint Exfiltrationdist/chunks/chunk-UVHKXCR5.js
HighCommand Output Exfiltrationdist/commands-ai.js
HighSandbox Evasion Gated Capabilitydist/commands-core.js
HighCross File Remote Execution Contextdist/chunks/chunk-2PKEEQ5W.js
HighSemantic Analysis Limiteddist/chunks/chunk-2U7DJZSQ.js#virtual:normalized:round1
MediumDynamic Requiredist/get-latest-worker.cjs
Medium
Affected versions and remediation
This report applies to @vercel/cli-support@65.3.1.
See all versions of @vercel/cli-support for other recorded verdicts.
- Review the evidence and your use of @vercel/cli-support@65.3.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.