@zuplo/cli@7.7.10
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is not proven malicious, but it performs identifiable telemetry and contains large bundled and binary artifacts that prevent a clean verdict under the required coverage constraints. The risky actions are user-triggered rather than lifecycle-triggered.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs a Zuplo CLI command or invokes the dev-portal migration command.
Impact
Analytics can receive an identifier, account, project, and command context; migration can modify the selected project directory.
Mechanism
CLI telemetry and explicit project migration
AI rationale
The package is not proven malicious, but it performs identifiable telemetry and contains large bundled and binary artifacts that prevent a clean verdict under the required coverage constraints. The risky actions are user-triggered rather than lifecycle-triggered.
Evidence
dist/common/middleware/user-identification.jsdist/common/analytics/lib.jsdist/common/machine-id/lib.jsdist/source/migrate/dev-portal/handler.js.env.zuplo.envdocs/package.jsondocs/tsconfig.json
Network endpoints2
app.posthog.comcdn.jsdelivr.net
Decision evidence
public snapshotAI called this Suspicious at 79.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI derives a telemetry identity from the local authentication file or a machine identifier.
- Analytics sends command context to PostHog unless the user sets the opt-out environment variable.
- A migration command downloads templates and writes project files.
- The bundled runtime reads all environment variables and local environment files.
- The package includes large minified bundles and a binary test archive, limiting static assurance.
Evidence against
- The manifest has no preinstall, install, or postinstall lifecycle hook.
- The package entry point is a user-invoked CLI executable.
- The linter executes only the resolved platform linter binary with constructed arguments.
- The observed network use is tied to CLI analytics, Zuplo APIs, or an explicit migration command; no covert exfiltration path was confirmed.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
21 flaggeddist/source/migrate/dev-portal/handler.jsView file
1import { exec } from "node:child_process";
L2: import { mkdir, readFile, rename, stat, unlink, writeFile, } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L1dist/lint/handler.jsView file
1import path from "node:path";
L2: import { execa } from "execa";
L3: import { shutdownAnalytics } from "../common/analytics/lib.js";
High
node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
3 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
CriticalPrevious Version Dangerous Deltadist/common/machine-id/lib.js
HighChild Processdist/source/migrate/dev-portal/handler.js
HighShelldist/lint/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-M3VFT3HF.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.7.10.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.7.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.