registry / @vm0/cli / 9.234.0

@vm0/cli@9.234.0

Zero command-line interface for vm0

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 20 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

Manifest

NoLicense

scanned 603 file(s), 8.49 MB of source, external domains: 7i30hpv4bo9ud5mhianq.pika.art, a.klaviyo.com, account-d.docusign.com, account.docusign.com, account.mapbox.com, actions.zapier.com, admin.explorium.ai, admin.typeform.com, aeroapi.flightaware.com, ahrefs.com, ai-gateway.vercel.sh, aistudio.google.com, amplitude.com, analytics.eu.amplitude.com, analyticsadmin.googleapis.com, analyticsdata.googleapis.com, api-cloud.browserstack.com, api-dashboard.search.brave.com, api-inference.huggingface.co, api-ipv4.porkbun.com, api.accounts.nintendo.com, api.adzuna.com, api.agentmail.to, api.agora.io, api.ahrefs.com, api.airtable.com, api.amadeus.com, api.anthropic.com, api.apify.com, api.apollo.io, api.ashbyhq.com, api.atlascloud.ai, api.atlassian.com, api.attio.com, api.aviationstack.com, api.axiom.co, api.bfl.ai, api.bitrefill.com, api.bland.ai, api.box.com, api.brevo.com, api.brex.com, api.brightdata.com, api.browser-use.com, api.browserbase.com, api.browserstack.com, api.bubblemaps.io, api.buffer.com, api.bufferapp.com, api.builtwith.com

Source & flagged code

12 flagged

doctor-SHY37GQF.jsView file

Lines 1430-1470javascript

1430 "typeform",

1431 "v0",

1432 "vercel",

1433 "wandb",

1434 "webflow",

1435 "weread",

1436 "whale-alert",

1437 "wix",

1438 "workos",

1439 "wrike",

1440 "x",

1441 "xero",

1442 "youtube",

1443 "zapier",

1444 "zapsign",

1445 "zendesk",

1446 "zep",

1447 "zeptomail",

1448 "zoom"

1449]);

1450var firewallServerExecutionMetadataJson = '{\n "adzuna": {\n "type": "adzuna",\n "billable": false,\n "baseUrlVarNames": [],\n "baseUrlTemplates": [],\n "secretPlaceholderNames": [\n "ADZUNA_APP_KEY"\n ],\n "placeholderValues": {\n "ADZUNA_APP_KEY": "CoffeeSafeLocalCoffeeSafeLocalCoffeeSafe"\n }\n },\n "agentmail": {\n "type": "agentmail",\n "billable": false,\n "baseUrlVarNames": [],\n "baseUrlTemplates": [],\n "secretPlaceholderNames": [\n "AGENTMAIL_TOKEN"

1451var firewallServerExecutionMetadataValue = JSON.parse(firewallServerExecutionMetadataJson);

1452var FIREWALL_SERVER_EXECUTION_METADATA = firewallServerExecutionMetadataValue;

1453

1454// ../../packages/connectors/src/firewall-metadata/server.generated.ts

1455init_esm_shims();

1456var builtinFirewallFixedHostOwnersJson = '{\n "7i30hpv4bo9ud5mhianq.pika.art": "pika",\n "a.klaviyo.com": "klaviyo",\n "account-d.docusign.com": "docusign",\n "account.docusign.com": "docusign",\n "actions.zapier.com": "zapier",\n "aeroapi.flightaware.com": "flightaware",\n "amplitude.com": "amplitude",\n "analytics.eu.amplitude.com": "amplitude",\n "analyticsadmin.googleapis.com": "google-analytics",\n "analyticsdata.googleapis.com": "google-analytics",\n "api-cloud.browserstack.com": "browserstack",\n "api-inference.huggingface.co": "hugging-face",\n "api-ipv4.porkbun.com": "por ...

1457var builtinFirewallFixedHostOwnersValue = JSON.parse(builtinFirewallFixedHostOwnersJson);

1458

1459// ../../packages/connectors/src/firewall-metadata/server.ts

1460function isFirewallExecutionMetadataConnectorType(type) {

1461 return Object.prototype.hasOwnProperty.call(

1462 FIREWALL_SERVER_EXECUTION_METADATA,

1463 type

1464 );

1465}

1466function getFirewallExecutionMetadata(type) {

1467 if (!isFirewallExecutionMetadataConnectorType(type)) {

1468 return null;

1469 }

1470 return FIREWALL_SERVER_EXECUTION_METADATA[type];

Long lines were clipped for display.

1450patternName = slack_bot_token severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

Slack bot token in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = supabase_service_key severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

Supabase service role key (JWT) in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

esm-SRH3OR6L.jsView file

127break; L128: baggage[keyPair.key] = keyPair.metadata ? { value: keyPair.value, metadata: keyPair.metadata } : { value: keyPair.value }; L129: count2++; ... L378: function getNumberFromEnv(key) { L379: const raw = process.env[key]; L380: if (raw == null || raw.trim() === "") { ... L4436: for (let i = 0; i < namespace.length; i++) { L4437: hash = (hash << 5) - hash + namespace.charCodeAt(i); L4438: hash |= 0; ... L4697: let m; L4698: return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://sta... L4699: typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

esm-SRH3OR6L.jsView on unpkg · L127

24683patternName = generic_password severity = medium line = 24683 matchedText = newUrl.p...d%";

Medium

Secret Pattern

Hardcoded password in esm-SRH3OR6L.js

esm-SRH3OR6L.jsView on unpkg · L24683

index.jsView file

Lines 103-143javascript

103} from "./chunk-B3W2RUBP.js";

104import {

105 __toESM,

106 init_esm_shims

107} from "./chunk-DIRAZ3YX.js";

108

109// src/index.ts

110init_esm_shims();

111

112// src/commands/auth/index.ts

113init_esm_shims();

Source & flagged code

12 flagged · loading source

doctor-SHY37GQF.jsView file

1450patternName = stripe_live_secret severity = critical line = 1450 matchedText = var fire...n}';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = stripe_live_secret severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

Stripe live secret key in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = github_oauth severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

GitHub OAuth access token in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = sendgrid_api_key severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

SendGrid API key in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = slack_bot_token severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

Slack bot token in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = supabase_service_key severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

Supabase service role key (JWT) in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = stripe_test_secret severity = high line = 1450 matchedText = var fire...n}';

High

Secret Pattern

Stripe test secret key in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = google_api_key severity = high line = 1450 matchedText = var fire...n}';

High

Secret Pattern

Google API key in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

esm-SRH3OR6L.jsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

esm-SRH3OR6L.jsView on unpkg · L127

24683patternName = generic_password severity = medium line = 24683 matchedText = newUrl.p...d%";

Medium

Secret Pattern

Hardcoded password in esm-SRH3OR6L.js

esm-SRH3OR6L.jsView on unpkg · L24683

index.jsView file

123}; L124: const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET; L125: if (bypassSecret) { ... L130: async function requestDeviceCode(apiUrl) { L131: const response = await fetch(`${apiUrl}/api/cli/auth/device`, { L132: method: "POST", L133: headers: headersWithCliClientHeaders(buildHeaders()), L134: body: JSON.stringify({}) L135: }); ... L141: } L142: return response.json(); L143: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L123

•matchType = previous_version_dangerous_delta matchedPackage = @vm0/cli@9.232.3 matchedIdentity = npm:QHZtMC9jbGk:9.232.3 similarity = 0.908 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

Findings

6 Critical4 High5 Medium5 Low

CriticalCritical Secretdoctor-SHY37GQF.js

CriticalSecret Patterndoctor-SHY37GQF.js

HighSandbox Evasion Gated Capabilityindex.js

HighPrevious Version Dangerous Deltaindex.js

HighSecret Patterndoctor-SHY37GQF.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistenceesm-SRH3OR6L.js

MediumStructural Risk Force Deep Review

MediumSecret Patternesm-SRH3OR6L.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

12 flagged

doctor-SHY37GQF.jsView file

Lines 1430-1470javascript

1430 "typeform",

1431 "v0",

1432 "vercel",

1433 "wandb",

1434 "webflow",

1435 "weread",

1436 "whale-alert",

1437 "wix",

1438 "workos",

1439 "wrike",

1440 "x",

1441 "xero",

1442 "youtube",

1443 "zapier",

1444 "zapsign",

1445 "zendesk",

1446 "zep",

1447 "zeptomail",

1448 "zoom"

1449]);

1451var firewallServerExecutionMetadataValue = JSON.parse(firewallServerExecutionMetadataJson);

1452var FIREWALL_SERVER_EXECUTION_METADATA = firewallServerExecutionMetadataValue;

1453

1454// ../../packages/connectors/src/firewall-metadata/server.generated.ts

1455init_esm_shims();

1457var builtinFirewallFixedHostOwnersValue = JSON.parse(builtinFirewallFixedHostOwnersJson);

1458

1459// ../../packages/connectors/src/firewall-metadata/server.ts

1460function isFirewallExecutionMetadataConnectorType(type) {

1461 return Object.prototype.hasOwnProperty.call(

1462 FIREWALL_SERVER_EXECUTION_METADATA,

1463 type

1464 );

1465}

1466function getFirewallExecutionMetadata(type) {

1467 if (!isFirewallExecutionMetadataConnectorType(type)) {

1468 return null;

1469 }

1470 return FIREWALL_SERVER_EXECUTION_METADATA[type];

Long lines were clipped for display.

1450patternName = slack_bot_token severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

Slack bot token in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

1450patternName = supabase_service_key severity = critical line = 1450 matchedText = var fire...n}';

Critical

Secret Pattern

Supabase service role key (JWT) in doctor-SHY37GQF.js

doctor-SHY37GQF.jsView on unpkg · L1450

esm-SRH3OR6L.jsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

esm-SRH3OR6L.jsView on unpkg · L127

24683patternName = generic_password severity = medium line = 24683 matchedText = newUrl.p...d%";

Medium

Secret Pattern

Hardcoded password in esm-SRH3OR6L.js

esm-SRH3OR6L.jsView on unpkg · L24683

index.jsView file

Lines 103-143javascript

103} from "./chunk-B3W2RUBP.js";

104import {

105 __toESM,

106 init_esm_shims

107} from "./chunk-DIRAZ3YX.js";

108

109// src/index.ts

110init_esm_shims();

111

112// src/commands/auth/index.ts

113init_esm_shims();