registry / @withone/cli / 1.52.3
@withone/cli@1.52.3
CLI for managing One
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 20 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
10 flaggeddist/index.jsView file
655import { createRequire } from "module";
L656: import { spawn } from "child_process";
L657: import { readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
High
731stdio: "ignore",
L732: shell: true
L733: });
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
configPath: "~/.claude.json",
detectDir: "~/.claude",
configPath: "~/.codex/config.toml",
detectDir: "~/.codex",
projectConfigPath: ".codex/config.toml",
fs.writeFileSync(configPath, stringifyToml(config2));
fs.writeFileSync(configPath, JSON.stringify(config2, null, 2));
const baseUrlMode = await p.select({
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgFindings
6 High5 Medium9 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Persistencedist/index.js
MediumDynamic Requiredist/chunk-IKYXS7EI.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/chunk-WXJWF7QG.js
Affected versions and remediation
This report applies to @withone/cli@1.52.3.
See all versions of @withone/cli for other recorded verdicts.
- Review the evidence and your use of @withone/cli@1.52.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.