registry / @zuplo/cli / 7.5.4
@zuplo/cli@7.5.4
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious install hook, secret theft, persistence, or destructive action was established. The external template download and incomplete inspectability leave a real supply-chain risk that warrants a warning rather than a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the dev-portal migration or runtime commands.
Impact
A compromised CDN response could influence generated project files; bundled runtime behavior could process environment-derived configuration.
Mechanism
User-invoked project migration, environment-aware runtime, and remote logging.
AI rationale
No concrete malicious install hook, secret theft, persistence, or destructive action was established. The external template download and incomplete inspectability leave a real supply-chain risk that warrants a warning rather than a clean verdict.
Evidence
dist/source/migrate/dev-portal/handler.jsnode_modules/@zuplo/core/zeno.jsnode_modules/@zuplo/runtime/out/esm/chunk-HEFHZ2HU.jsdocs/package.jsondocs/tsconfig.jsonconfig/dev-portal.jsondocs/sidebar.jsondocs/theme.css
Network endpoints1
cdn.jsdelivr.net
Decision evidence
public snapshotAI called this Suspicious at 68.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package contains opaque bundled and binary artifacts, and static coverage is incomplete.
- The explicit dev-portal migration downloads templates from a CDN and writes them into the selected project.
- The migration deletes legacy project files after it runs.
- The bundled runtime reads environment data and can enable an HTTP client that permits host overrides.
- Bundled minified code includes dynamic require support.
- The bundled runtime can send remote logs using a bearer token.
Evidence against
- package.json has a CLI bin entry and no install lifecycle script.
- The migration code is reached through an explicit user command and confines writes to its supplied project directory.
- The analytics code honors ZUPLO_DO_NOT_TRACK and records CLI telemetry rather than enumerating environment variables.
- No concrete secret exfiltration, install-time execution, persistence, or destructive behavior was confirmed.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
20 flaggeddist/source/migrate/dev-portal/handler.jsView file
1import { exec } from "node:child_process";
L2: import { mkdir, readFile, rename, stat, unlink, writeFile, } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L1dist/lint/handler.jsView file
1import path from "node:path";
L2: import { execa } from "execa";
L3: import { shutdownAnalytics } from "../common/analytics/lib.js";
High
node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/migrate/dev-portal/handler.js
HighShelldist/lint/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-HEFHZ2HU.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.5.4.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.5.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.