registry / @zuplo/cli / 7.11.8
@zuplo/cli@7.11.8
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 20d ago · by lpm-firewall-aiSource inspection resolves the credential finding to authentication with the configured Zuplo developer API, and the callers are user-invoked project-info commands. The remaining reviewed findings map to CLI analytics, library code, project utilities, and a dependency test fixture; no concrete malicious behavior was established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the info or project info CLI command; analytics runs with CLI event capture unless disabled.
Impact
The reviewed behavior retrieves linked project information and emits CLI usage analytics; no confirmed attack impact was established.
Mechanism
The command passes its auth token to the developer API endpoint setting, which defaults to dev.zuplo.com. Analytics sends event data to app.posthog.com and uses a hashed machine identifier.
AI rationale
Source inspection resolves the credential finding to authentication with the configured Zuplo developer API, and the callers are user-invoked project-info commands. The remaining reviewed findings map to CLI analytics, library code, project utilities, and a dependency test fixture; no concrete malicious behavior was established.
Evidence
dist/cmds/info.jsdist/cmds/project/info.jsdist/project/info/handler.jsdist/common/settings.jsdist/common/analytics/lib.jsdist/common/machine-id/lib.js
Network endpoints2
dev.zuplo.comapp.posthog.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the zup.js CLI entry point.
- Both info command handlers emit a CLI event and call the shared project-info handler.
- The handler sends its bearer token to the developer API endpoint setting; the default is dev.zuplo.com, and authentication supplies either the provided API key or a saved Zuplo token.
- CLI analytics sends event data to PostHog, can be disabled with ZUPLO_DO_NOT_TRACK, and uses a hashed machine identifier.
- The reviewed upgrade and migration functions operate on the selected project; the reviewed dependency worker is a test fixture that forwards supplied chunks through its message port.
- The flagged bundled files resolve to CLI/runtime and CodeMirror library code; the inspected excerpts show no concrete attack behavior.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
20 flaggeddist/source/ai-gateway/files.jsView file
1import { execFile } from "node:child_process";
L2: import { randomUUID } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/source/ai-gateway/files.jsView on unpkg · L1dist/source/migrate/dev-portal/handler.jsView file
20};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/ai-gateway/files.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-7WJVPTYD.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.11.8.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.11.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.