registry / @zuplo/cli / 7.11.1
@zuplo/cli@7.11.1
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 22d ago · by lpm-firewall-aiSource inspection found CLI-invoked authentication and telemetry directed to the package’s Zuplo and PostHog services, plus deployment-configured runtime logging. The flagged bundle, editor, and archive paths did not establish concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes a CLI command, or a deployed runtime emits logs with its logging settings configured.
Impact
The inspected source does not establish unauthorized credential disclosure, account changes, or system compromise.
Mechanism
The project-info command sends its auth token to the configured Zuplo developer API; usage events go to PostHog, and runtime logs are forwarded only when required deployment settings are present.
AI rationale
Source inspection found CLI-invoked authentication and telemetry directed to the package’s Zuplo and PostHog services, plus deployment-configured runtime logging. The flagged bundle, editor, and archive paths did not establish concrete malicious behavior.
Network endpoints2
dev.zuplo.comapp.posthog.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes zup.js as the CLI entrypoint, which imports dist/cli.js.
- Both project-info commands call the shared handler when invoked. It sends the provided auth token to the configured Zuplo developer API, which defaults to https://dev.zuplo.com; authentication uses an API key or saved login token.
- The info commands capture usage events for app.posthog.com, and analytics can be disabled with ZUPLO_DO_NOT_TRACK.
- Runtime log forwarding requires deployment-provided remoteLogURL, loggingId, and remoteLogToken settings; the local runtime loads project environment files.
- The other reviewed paths show project-scoped git and migration operations, machine-ID hashing, vendored browser editor code, and a test-fixture worker forwarding chunks through its supplied port.
Evidence against
- The inspected token transfer is to the configured Zuplo developer API, and no unrelated recipient or unauthorized account action was established.
- The runtime logger is gated by deployment settings; the archive analysis identifies a test-fixture worker, not an active package payload.
Behavioral surface
Source & flagged code
21 flaggeddist/source/ai-gateway/files.jsView file
1import { execFile } from "node:child_process";
L2: import { randomUUID } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/source/ai-gateway/files.jsView on unpkg · L1dist/source/migrate/dev-portal/handler.jsView file
20};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
3 Critical11 High8 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationnode_modules/@zuplo/runtime/out/esm/chunk-RHU3Z7DA.js
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/ai-gateway/files.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-RHU3Z7DA.js
Affected versions and remediation
This report applies to @zuplo/cli@7.11.1.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.11.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.