registry / @wraps.dev/cli
@wraps.dev/cli
Deploy email, SMS, and CDN infrastructure to your AWS account with one command. Sets up SES with DKIM/SPF/DMARC, event processing, and history automatically.
This report shows the evidence for @wraps.dev/cli@3.20.1. 0 of 32 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 17h ago · by lpm-firewall-aiThe flagged behavior is consistent with an AWS deployment CLI: the metadata access is AWS SDK credential-provider code, and the curl-to-shell match is printed installation guidance. Runtime telemetry is sent to the package service with an opt-out, and the manifest has no install hook.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
No malicious trigger was found; the package runs as a user-invoked CLI.
Impact
No evidence of credential exfiltration, hidden execution, or other malicious impact was found.
Mechanism
AWS metadata access supports AWS credential resolution; runtime telemetry is directed to the package service and offers an opt-out.
AI rationale
The flagged behavior is consistent with an AWS deployment CLI: the metadata access is AWS SDK credential-provider code, and the curl-to-shell match is printed installation guidance. Runtime telemetry is sent to the package service with an opt-out, and the manifest has no install hook.
Network endpoints2
169.254.169.254wraps.dev/api/telemetry
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes an AWS infrastructure deployment CLI and exposes dist/cli.js as its main entry and wraps executable.
- The package scripts contain build and test commands but no install lifecycle hook.
- The metadata access is part of AWS credential-provider logic that requests an IMDSv2 token, consistent with the package's AWS purpose.
- Runtime telemetry goes to wraps.dev and the CLI displays an opt-out command.
Evidence against
- The flagged curl-to-shell text appears in a Pulumi installation troubleshooting message; no automatic execution is shown in that excerpt.
- Telemetry is sent to the package's service and can be disabled.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
13 flaggeddist/cli.jsView file
19import { fileURLToPath } from "url";
L20: var getFilename, getDirname, __dirname;
L21: var init_esm_shims = __esm({
...
L272: // src/utils/shared/aws-detection.ts
L273: import { execSync } from "child_process";
L274: import { existsSync, readdirSync, readFileSync } from "fs";
...
L295: function detectCredentialSource() {
L296: if (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) {
L297: return "environment";
...
L338: const sts = new STSClient({ region: "us-east-1" });
L339: const identity = await sts.send(new GetCallerIdentityCommand({}));
L340: return identity.Account || null;
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/cli.jsView on unpkg · L1919Trigger-reachable chain: manifest.main -> dist/cli.js
L19: import { fileURLToPath } from "url";
L20: var getFilename, getDirname, __dirname;
L21: var init_esm_shims = __esm({
...
L272: // src/utils/shared/aws-detection.ts
L273: import { execSync } from "child_process";
L274: import { existsSync, readdirSync, readFileSync } from "fs";
...
L295: function detectCredentialSource() {
L296: if (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) {
L297: return "environment";
...
L338: const sts = new STSClient({ region: "us-east-1" });
L339: const identity = await sts.send(new GetCallerIdentityCommand({}));
L340: return identity.Account || null;
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical7 High5 Medium8 Low
CriticalHardcoded Runtime Data Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighCloud Metadata Accessdist/cli.js
HighCross File Remote Execution Contextdist/cli.js
HighSemantic Analysis Limiteddist/lambda/inbound-processor/index.js
MediumDynamic Requiredist/lambda/agent-enforcer/index.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @wraps.dev/cli@3.20.1.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @wraps.dev/cli@3.20.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.