@zuplo/cli@7.7.13
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a first-party Zuplo CLI with no npm lifecycle scripts; inspectable code matches deploy, lint, local runtime, and PostHog telemetry. A clean verdict is not grounded because a nested binary zip cannot be cited as text and large minified bundles exceeded complete static coverage.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm install does not run package scripts; remaining behavior starts when a user runs the zup command or when nested bundled files are loaded.
Impact
No confirmed compromise from this inspection. The gap is that unreadble nested artifacts or minified runtime code could hide extra behavior that static review could not finish.
Mechanism
Incomplete static coverage of bundled minified code and a nested binary zip
AI rationale
This is a first-party Zuplo CLI with no npm lifecycle scripts; inspectable code matches deploy, lint, local runtime, and PostHog telemetry. A clean verdict is not grounded because a nested binary zip cannot be cited as text and large minified bundles exceeded complete static coverage.
Decision evidence
public snapshotAI called this Suspicious at 58.0% confidence as Unknown with high false-positive risk.
Evidence for warning
- Bundled first-party minified files in @zuplo/core and @zuplo/runtime are too large and opaque for complete static review.
- A nested binary zip at node_modules/thread-stream/test/dir with spaces/test-package.zip cannot be read as text.
- User-invoked migrate and lint commands spawn git and a native lint binary.
- CLI telemetry hashes a machine identifier and sends events to PostHog.
Evidence against
- package.json has no scripts field and no preinstall, install, or postinstall hooks.
- zup.js only imports dist/cli.js; nothing runs automatically at npm install time.
- Inspectable CLI network defaults are Zuplo APIs, Auth0, and PostHog, not off-vendor steal endpoints.
- The zip is referenced only from a thread-stream yarn PnP test, not from CLI runtime.
- zeno.js env and Redis usage matches a local Zuplo worker runtime; CodeMirror bidi matches editor RTL handling.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
20 flaggeddist/source/migrate/dev-portal/handler.jsView file
1import { exec } from "node:child_process";
L2: import { mkdir, readFile, rename, stat, unlink, writeFile, } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L1dist/lint/handler.jsView file
1import path from "node:path";
L2: import { execa } from "execa";
L3: import { shutdownAnalytics } from "../common/analytics/lib.js";
High
node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/migrate/dev-portal/handler.js
HighShelldist/lint/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-VUNRXOEM.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
High
Affected versions and remediation
This report applies to @zuplo/cli@7.7.13.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.7.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.