@zuplo/cli@7.13.9
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe CLI sends default usage analytics and caught exception data to PostHog, and the inspected package files did not disclose this behavior. The opt-out and use of a decoded account identifier or hashed machine ID reduce the risk; the evidence supports a telemetry warning, not credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running a CLI command; error reporting additionally triggers when the CLI catches an Error.
Impact
PostHog receives usage and error information; exception data may expose local paths in stack traces.
Mechanism
The CLI captures command and version details, user or hashed machine identifiers, account/project context, and exception data for PostHog.
AI rationale
The CLI sends default usage analytics and caught exception data to PostHog, and the inspected package files did not disclose this behavior. The opt-out and use of a decoded account identifier or hashed machine ID reduce the risk; the evidence supports a telemetry warning, not credential exfiltration.
Evidence
dist/cli.jsdist/common/analytics/lib.jsdist/common/analytics/cli-invocation.jsdist/common/middleware/user-identification.jsdist/common/machine-id/lib.jsdist/common/constants.js
Network endpoints1
app.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The installed CLI entry point imports dist/cli.js, where middleware captures an invocation event by default.
- The invocation event includes the CLI version and command; analytics initializes PostHog unless ZUPLO_DO_NOT_TRACK is set, and targets https://app.posthog.com.
- Identification reads the Zuplo auth file but uses the decoded JWT subject as an ID; without it, the CLI uses a SHA-256 hashed machine ID.
- The CLI sends caught Error objects to captureError, which forwards them to PostHog as exception events; these may contain local paths in stack traces.
- No telemetry disclosure was found in the inspected package files.
Evidence against
- ZUPLO_DO_NOT_TRACK disables analytics and error tracking.
- The inspected code sends the decoded user ID, not the Zuplo access token; the fallback machine ID is hashed.
- The command execution flagged in the bundle is used to start local Zuplo development services with the environment they need.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
20 flaggeddist/source/ai-gateway/files.jsView file
1import { execFile } from "node:child_process";
L2: import { randomUUID } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/source/ai-gateway/files.jsView on unpkg · L1dist/source/migrate/dev-portal/handler.jsView file
20};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/ai-gateway/files.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-D4D3WYPP.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.13.9.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.13.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.