@vibeapi/api-helper@0.0.144
CLI tool for managing AI coding assistants (Claude Code, Codex, OpenClaw, Hermes, AtomCode, Grok Build) with one unified config
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe CLI sends runtime telemetry by default, including command events and platform/runtime identifiers, without a README disclosure found in the package. The opt-out and limited event collection reduce the risk, so this is suspicious telemetry rather than a confirmed data-exfiltration attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI; telemetry is flushed before the CLI exits.
Impact
Usage and runtime metadata are sent without an evident disclosure in the package README; users can disable telemetry with TELEMETRY=0, false, or off.
Mechanism
Collects command events and package, platform, runtime, and install identifiers, then posts batches to the configured API base URL.
AI rationale
The CLI sends runtime telemetry by default, including command events and platform/runtime identifiers, without a README disclosure found in the package. The opt-out and limited event collection reduce the risk, so this is suspicious telemetry rather than a confirmed data-exfiltration attack.
Evidence
dist/cli.jsdist/lib/command.jsdist/lib/telemetry.js
Network endpoints1
Configured API base URL: /api/platform/vibecode/telemetry
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime telemetry is enabled by default; setting TELEMETRY to 0, false, or off disables it. Telemetry headers include an install ID and platform/runtime identifiers.
- CLI use records command events and sends pending telemetry before exit; events can include command details and masked error messages.
- Telemetry batches are posted to /api/platform/vibecode/telemetry using the configured API base URL.
Evidence against
- The manifest has no install, preinstall, or postinstall hook.
- The package is a CLI for managing AI coding assistants, and the observed telemetry is tied to CLI command use.
- Command-start telemetry filters out non-flag arguments and flags whose names contain “key”; the code also masks home paths and common token formats in errors.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/lib/tools/desktop-process.jsView file
1import{spawnSync as e}from"child_process";import{logger as t}from"../../utils/logger.js";export const WINDOWS_PACKAGE_FAMILIES=["Claude_pzs8sxrjxfjjc","AnthropicPBC.Claude_fnn82j28...
High
Child Process
Package source references child process execution.
dist/lib/tools/desktop-process.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
1 Critical5 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/lib/tools/claude-desktop.js
HighChild Processdist/lib/tools/desktop-process.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @vibeapi/api-helper@0.0.144.
See all versions of @vibeapi/api-helper for other recorded verdicts.
- Review the evidence and your use of @vibeapi/api-helper@0.0.144 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.