@vercel/cli-support@65.8.0
The JavaScript Vercel CLI, installed by `vercel` where no native binary is available
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe bundled OIDC helper discloses the machine hostname and runtime details to Vercel during authentication. This is a narrow runtime privacy concern, not evidence of credential theft or unrelated data collection.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
When the bundled OIDC helper performs token endpoint discovery or refresh; not on install or ordinary import.
Impact
Vercel’s auth service receives the machine hostname and runtime details without a separate telemetry prompt; this is a limited privacy risk.
Mechanism
The helper adds the Node version, platform, architecture, and os.hostname() to a User-Agent that it sends with discovery and refresh requests.
AI rationale
The bundled OIDC helper discloses the machine hostname and runtime details to Vercel during authentication. This is a narrow runtime privacy concern, not evidence of credential theft or unrelated data collection.
Evidence
dist/chunks/chunk-UVHKXCR5.js
Network endpoints3
vercel.com/.well-known/openid-configurationtoken_endpoint returned by Vercel discoveryapi.vercel.com/v1/projects/{projectId}/token
Decision evidence
public snapshotAI called this Suspicious at 74.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The bundled OIDC helper puts the Node version, platform, architecture, and local hostname in its User-Agent.
- OIDC token refresh sends that User-Agent to the token endpoint returned by Vercel’s discovery request.
Evidence against
- The hostname disclosure is limited to the Vercel OIDC authentication flow; the code does not show it being sent to an unrelated collector.
- No lifecycle script is declared in the package manifest.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
13 flaggeddist/commands-blob.jsView file
8patternName = private_key_rsa
severity = critical
line = 8
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/commands-blob.jsView on unpkg · L88patternName = private_key_rsa
severity = critical
line = 8
Critical
dist/commands-ai.jsView file
55`}}],envExports:[{name:GATEWAY_API_KEY_ENV,value:ctx.apiKey}],notes:[`Mistral Vibe will default to ${activeModel} through the gateway; switch with /model.`,...models3.length?[`${mo...
L56: ${import_chalk19.default.dim(" Detected agents are pre-selected \xB7")}${CHECKBOX_INSTRUCTIONS}`,instructions:!1,loop:!1,pageSize:Math.max(choices.length,7),choices})).map(id=>get...
L57: `)}function preservedEnvLines(current,writtenNames){if(!current)return[];let start=current.indexOf(MANAGED_BLOCK_START),end=current.indexOf(MANAGED_BLOCK_END);if(start===-1||end===...
Findings
3 Critical8 High4 Medium6 Low
CriticalCritical Secretdist/commands-blob.js
CriticalPrevious Version Dangerous Deltadist/chunks/chunk-7BML2OR6.js
CriticalSecret Patterndist/commands-blob.js
HighChild Processdist/commands-ai.js
HighShell
HighSame File Env Network Executiondist/commands-ai.js
HighHost Fingerprint Exfiltrationdist/chunks/chunk-UVHKXCR5.js
HighCommand Output Exfiltrationdist/commands-ai.js
HighSandbox Evasion Gated Capabilitydist/commands-core.js
HighCross File Remote Execution Contextdist/chunks/chunk-3P4Y46MS.js
HighSemantic Analysis Limiteddist/chunks/chunk-4NTBYNFR.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @vercel/cli-support@65.8.0.
See all versions of @vercel/cli-support for other recorded verdicts.
- Review the evidence and your use of @vercel/cli-support@65.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.