registry / @zuplo/cli / 7.12.3
@zuplo/cli@7.12.3
⚠ Under review<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe inspected credential flow targets the configured Zuplo developer API, and the usage telemetry has an opt-out. I cannot mark the package clean because required source paths remain unresolved, so the source evidence does not support a malicious verdict or a clean one.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
CLI command invocation; the inspected project information commands run when a user invokes them.
Impact
The inspected behavior does not establish an attack; incomplete required source review prevents a clean determination.
Mechanism
Project requests send the CLI token to the configured developer API. Usage events go to the configured analytics collector and may include identifying context.
AI rationale
The inspected credential flow targets the configured Zuplo developer API, and the usage telemetry has an opt-out. I cannot mark the package clean because required source paths remain unresolved, so the source evidence does not support a malicious verdict or a clean one.
Network endpoints1
dev.zuplo.com
Decision evidence
public snapshotAI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json defines the CLI entry point and shows no lifecycle scripts.
- Project information commands send the supplied token to the configured Zuplo developer API; its default is dev.zuplo.com.
- The CLI sends usage events to its configured PostHog collector and supports the ZUPLO_DO_NOT_TRACK opt-out.
- Telemetry can include a hashed machine identifier and account, project, and CI values.
- Required clean-review coverage includes many uninspected source paths and a binary archive that cannot be cited as UTF-8 source.
Evidence against
- The inspected credential requests target the Zuplo developer API, not an unrelated recipient.
- Telemetry is tied to CLI command invocation and has a tracking opt-out; the inspected files do not establish credential collection or an attack.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
20 flaggeddist/source/ai-gateway/files.jsView file
1import { execFile } from "node:child_process";
L2: import { randomUUID } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/source/ai-gateway/files.jsView on unpkg · L1dist/source/migrate/dev-portal/handler.jsView file
20};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/ai-gateway/files.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-JBEZQ336.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.12.3.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.12.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.