registry / @zuplo/cli / 7.4.4
@zuplo/cli@7.4.4
⚠ Under review<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection did not establish behavior independently warranting a warning or block. The required nine-path clean citation coverage exceeds the eight-citation maximum, so the supplied decision rule requires manual_review.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Users invoke zup commands; no automatic npm lifecycle attack trigger was identified.
Impact
No malicious impact was established; manual review is required solely to resolve the citation coverage constraint.
Mechanism
Inspected code runs local development tools, migrates selected project files, and performs authentication and telemetry requests.
AI rationale
Static inspection did not establish behavior independently warranting a warning or block. The required nine-path clean citation coverage exceeds the eight-citation maximum, so the supplied decision rule requires manual_review.
Network endpoints2
dev.zuplo.comapp.posthog.com
Decision evidence
public snapshotAI called this Manual Review at 98.0% confidence as Unknown with high false-positive risk.
AI review observations
- package.json declares the zup CLI without npm lifecycle hooks or a runtime self-dependency.
- The user-invoked portal migration checks Git status and removes specified legacy portal files.
- Bundled core code launches workerd and imports application worker modules.
- Telemetry supports ZUPLO_DO_NOT_TRACK and hashes the machine identifier.
- Inspected editor and runtime excerpts implement DOM construction and cookie serialization; the ZIP contains a thread-stream test worker.
- No independent warning or blocking behavior was established; required clean coverage needs nine distinct citations, exceeding the eight-citation limit.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
21 flaggeddist/source/migrate/dev-portal/handler.jsView file
1import { exec } from "node:child_process";
L2: import { mkdir, readFile, rename, stat, unlink, writeFile, } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L120};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
6const code = readFileSync(
L7: join(__dirname, '..', '..', 'node_modules', 'loglevel', 'lib', 'loglevel.js')
L8: )
...
L50: if (require.main === module) {
L51: const loglevel = build(process.stdout)
L52: loglevel.info('hello')
Findings
3 Critical11 High8 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationnode_modules/@zuplo/runtime/out/esm/chunk-4SX4HBWT.js
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/migrate/dev-portal/handler.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-4SX4HBWT.js
Affected versions and remediation
This report applies to @zuplo/cli@7.4.4.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.4.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.