registry / @zuplo/cli / 7.4.6
@zuplo/cli@7.4.6
⚠ Under review<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 2mo ago · by lpm-firewall-aiInspected source is a first-party Zuplo CLI with no lifecycle hooks and no concrete attack chain; scanner hits were package-aligned runtime, analytics, editor, and test assets. A clean verdict cannot be emitted because nine required citation paths exceed the eight-citation limit.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm install does not run package scripts; behavior starts when a user runs the zup command.
Impact
no confirmed malicious impact; remaining gap is citation capacity for a clean label
Mechanism
no confirmed attack mechanism
AI rationale
Inspected source is a first-party Zuplo CLI with no lifecycle hooks and no concrete attack chain; scanner hits were package-aligned runtime, analytics, editor, and test assets. A clean verdict cannot be emitted because nine required citation paths exceed the eight-citation limit.
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with high false-positive risk.
AI review observations
- Manifest is @zuplo/cli 7.4.6 with bin zup and no npm lifecycle scripts.
- Bundled @zuplo/core zeno and customer CLI files are first-party Zuplo-licensed local gateway/build code, not a hidden third-party dropper.
- The user-invoked CLI can send opt-out PostHog telemetry using a hashed machine id.
- Dev-portal migrate rewrites the local project only when that command is run.
- Bundled @zuplo/runtime chunks are the same first-party Zuplo product surface.
- Nine scanner-required citation paths exceed the eight-citation cap, so a clean label cannot be emitted after this inspection.
Evidence against
- No install-time hook, covert exfil chain, or agent-config write was found in package source.
- API tokens are sent to https://dev.zuplo.com by default or to an explicit self-hosted flag the operator sets.
- Scanner zip, wasm, and bidi hits are bundled editor, test, and runtime assets with no install trigger.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
20 flaggeddist/source/migrate/dev-portal/handler.jsView file
1import { exec } from "node:child_process";
L2: import { mkdir, readFile, rename, stat, unlink, writeFile, } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L120};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
6const code = readFileSync(
L7: join(__dirname, '..', '..', 'node_modules', 'loglevel', 'lib', 'loglevel.js')
L8: )
...
L50: if (require.main === module) {
L51: const loglevel = build(process.stdout)
L52: loglevel.info('hello')
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/migrate/dev-portal/handler.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-ZPOD3IK4.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
Affected versions and remediation
This report applies to @zuplo/cli@7.4.6.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.4.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.