registry / @zuplo/cli / 7.11.6
@zuplo/cli@7.11.6
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 21d ago · by lpm-firewall-aiSource inspection found no concrete malicious behavior: the token-bearing request serves the CLI's linked-project query at Zuplo's developer API, and analytics has a documented opt-out. The scanner's bundled-file and archive findings did not establish an active attack path.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the info or project info command.
Impact
No unrelated credential recipient or other confirmed attack impact was established.
Mechanism
The CLI sends the supplied or saved Zuplo token in a GET request for linked project details; analytics is separately disabled when ZUPLO_DO_NOT_TRACK is set.
AI rationale
Source inspection found no concrete malicious behavior: the token-bearing request serves the CLI's linked-project query at Zuplo's developer API, and analytics has a documented opt-out. The scanner's bundled-file and archive findings did not establish an active attack path.
Evidence
dist/project/info/handler.jsdist/cmds/info.jsdist/cmds/project/info.jsdist/common/settings.jsdist/common/middleware/authentication.jsdist/common/analytics/lib.jsdist/common/constants.js
Network endpoints2
dev.zuplo.comapp.posthog.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes zup.js as the CLI entrypoint; the inspected manifest declares no lifecycle hook.
- The info commands pass an API key or saved Zuplo token to a GET request for project details at the configured Zuplo developer API endpoint, which defaults to dev.zuplo.com.
- Analytics can be disabled with ZUPLO_DO_NOT_TRACK, uses PostHog at app.posthog.com, and hashes the machine identifier used as a distinct ID.
- The AI Gateway file operations use project-scoped filesystem and Git operations; dev-portal migration is an explicit function that receives a directory argument.
- Inspected Zuplo core code contains Zuplo service endpoint defaults and local .env.zuplo configuration parsing; no credential exfiltration behavior was established.
- The flagged editor and runtime excerpts show DOM and cookie utilities; the inspected archive member is a Writable adapter that posts supplied chunks through its message port.
Evidence against
- The info request sends an authentication token in its Authorization header.
- Analytics may include a machine-derived distinct ID and CI, account, or project metadata.
Behavioral surface
Source & flagged code
20 flaggeddist/source/ai-gateway/files.jsView file
1import { execFile } from "node:child_process";
L2: import { randomUUID } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/source/ai-gateway/files.jsView on unpkg · L1dist/source/migrate/dev-portal/handler.jsView file
20};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/ai-gateway/files.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-5SHD5VGF.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.11.6.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.11.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.