registry / @zuplo/cli / 7.6.10
@zuplo/cli@7.6.10
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe source does not support a malicious or publish-block finding, but incomplete inspectability and bundled environment-capable code leave a real unresolved risk. Downgrade to a warning rather than marking clean.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running Zuplo CLI or bundled runtime features after explicit user invocation.
Impact
The opaque bundled content leaves residual uncertainty about what user-invoked runtime paths may access.
Mechanism
Bundled runtime environment access and subprocess execution.
AI rationale
The source does not support a malicious or publish-block finding, but incomplete inspectability and bundled environment-capable code leave a real unresolved risk. Downgrade to a warning rather than marking clean.
Evidence
node_modules/@zuplo/core/zeno.jsnode_modules/@zuplo/core/customer.cli.minified.jsnode_modules/thread-stream/test/dir with spaces/test-package.zip
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package bundles large minified Zuplo runtime code that reads the full Deno environment.
- Bundled runtime code spawns a child process with inherited environment variables.
- A non-UTF8 ZIP fixture prevents complete source-level verification of the scanned artifact.
Evidence against
- package.json defines no npm lifecycle scripts.
- The bin launcher only imports the CLI after an explicit zup invocation.
- The migration handler is an explicit command that checks Git status and edits the selected project directory.
- The lint handler executes a resolved lint binary only after an explicit lint command.
- No inspected source established credential exfiltration, remote payload download, or install-time execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetry
Source & flagged code
20 flaggeddist/source/migrate/dev-portal/handler.jsView file
1import { exec } from "node:child_process";
L2: import { mkdir, readFile, rename, stat, unlink, writeFile, } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L1650export: "legacyDevPortalHandler",
L651: module: "$import(@zuplo/runtime)",
L652: options: {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L650dist/lint/handler.jsView file
1import path from "node:path";
L2: import { execa } from "execa";
L3: import { shutdownAnalytics } from "../common/analytics/lib.js";
High
Findings
2 Critical10 High9 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/migrate/dev-portal/handler.js
HighShelldist/lint/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-R4PTES5B.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
HighCross File Remote Execution Contextnode_modules/@zuplo/core/customer.cli.minified.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.6.10.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.6.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.