registry / @zuplo/cli / 7.12.4
@zuplo/cli@7.12.4
⚠ Under review<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe inspected entrypoint and flagged sources show CLI execution and product analytics, with no confirmed attack behavior. I cannot mark the package clean because the required binary fixture cannot be reviewed or cited as UTF-8 source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running CLI commands activates their analytics calls; the unresolved fixture does not establish an executable trigger.
Impact
No credential theft or other attack impact was established. The unresolved fixture prevents a clean verdict.
Mechanism
Analytics sends CLI event data to the configured PostHog host, with a ZUPLO_DO_NOT_TRACK opt-out. The flagged worker code loads a project worker and serves it locally.
AI rationale
The inspected entrypoint and flagged sources show CLI execution and product analytics, with no confirmed attack behavior. I cannot mark the package clean because the required binary fixture cannot be reviewed or cited as UTF-8 source.
Evidence
node_modules/thread-stream/test/dir with spaces/test-package.zippackage.jsonzup.jsdist/common/analytics/lib.jsdist/common/constants.jsdist/common/machine-id/lib.jsnode_modules/@zuplo/core/zeno.js
Network endpoints1
app.posthog.com
Decision evidence
public snapshotAI called this Manual Review at 76.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes a CLI entrypoint, and zup.js imports the CLI module; the manifest has no scripts entry.
- Analytics initialization checks ZUPLO_DO_NOT_TRACK and configures PostHog at app.posthog.com.
- CLI analytics builds event properties from package-manager usage data and supplied event properties; account and user identifiers may be included.
- The machine ID helper hashes the platform identifier before returning it.
- The flagged zeno.js code loads a worker from the current project directory and starts its local server.
- The required test-package.zip fixture could not be reviewed or cited as UTF-8 source, so clean citation coverage remains unresolved.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
20 flaggeddist/source/ai-gateway/files.jsView file
1import { execFile } from "node:child_process";
L2: import { randomUUID } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/source/ai-gateway/files.jsView on unpkg · L1dist/source/migrate/dev-portal/handler.jsView file
20};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/ai-gateway/files.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-WTWRZT3M.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.12.4.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.12.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.