registry / @zuplo/cli / 7.6.2
@zuplo/cli@7.6.2
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo install-time attack chain is present; inspected behavior matches a Zuplo CLI with expected telemetry, deploy, and lint capabilities. Residual risk remains because minified bundled runtime could not be fully parsed and a binary test zip could not be cited or decoded as text.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user runs the zup command after install; npm install does not run package scripts.
Impact
Explicit commands can mutate the project and send telemetry; unread binary and incomplete minified parse leave residual dual-use risk.
Mechanism
User-invoked CLI plus bundled runtime with telemetry, exec, and an unread test zip
AI rationale
No install-time attack chain is present; inspected behavior matches a Zuplo CLI with expected telemetry, deploy, and lint capabilities. Residual risk remains because minified bundled runtime could not be fully parsed and a binary test zip could not be cited or decoded as text.
Evidence
package.jsondist/source/migrate/dev-portal/handler.jsdist/lint/handler.jsdist/common/analytics/lib.jsdist/common/machine-id/lib.jsnode_modules/@zuplo/core/zeno.jsnode_modules/@zuplo/core/customer.cli.minified.jsnode_modules/@zuplo/runtime/out/esm/chunk-AD7GOZGI.jsdocs/package.json.env.zuplo
Network endpoints3
app.posthog.comcdn.jsdelivr.net/npm/zudoku/package.jsoncdn.zuplo.com
Decision evidence
public snapshotAI called this Suspicious at 62.0% confidence as Dangerous Capability with high false-positive risk.
Evidence for warning
- Bundled minified Zuplo runtime loads full process environment from .env.zuplo and is too large for complete static parse.
- Minified customer CLI and runtime chunks issue authenticated fetch calls and POST runtime logs to remote URLs.
- User-invoked migrate fetches jsDelivr and writes project files; lint runs a native binary through execa.
- CLI analytics send a hashed machine id plus account, project, and CI flags to PostHog unless tracking is disabled.
- A bundled thread-stream test zip is binary and could not be read as source text, so leftover payload risk is unresolved.
Evidence against
- package.json has no preinstall, install, or postinstall scripts; the only entry is the user-invoked zup binary.
- Inspected network hosts are Zuplo, PostHog, jsDelivr, and documented gateway logging, not anonymous drop hosts.
- The unread zip is only referenced as a worker path in thread-stream tests, not from install or CLI startup.
- Local env loading in zeno.js is runtime bootstrap for the Zuplo worker, not an install-time harvester.
Behavioral surface
Source & flagged code
20 flaggeddist/source/migrate/dev-portal/handler.jsView file
1import { exec } from "node:child_process";
L2: import { mkdir, readFile, rename, stat, unlink, writeFile, } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L1dist/lint/handler.jsView file
1import path from "node:path";
L2: import { execa } from "execa";
L3: import { shutdownAnalytics } from "../common/analytics/lib.js";
High
node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/migrate/dev-portal/handler.js
HighShelldist/lint/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-AD7GOZGI.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.6.2.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.6.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.