@zuplo/cli@7.8.20
<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe active command forwards an existing service token to an unrestricted environment-configured destination, supporting a credential-exposure warning. Static inspection did not establish malicious behavior warranting a publication block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Run zup list with a saved access token and ZUPLO_DEVELOPER_API_ENDPOINT pointing to another destination.
Impact
The configured recipient can receive the service access token.
Mechanism
Authentication loads the saved token, then configuration middleware sends it in an Authorization header without binding the destination to the token's intended service.
AI rationale
The active command forwards an existing service token to an unrestricted environment-configured destination, supporting a credential-exposure warning. Static inspection did not establish malicious behavior warranting a publication block.
Evidence
dist/login/login.jsdist/login/tokens.jsdist/common/middleware/authentication.jsdist/common/settings.jsdist/common/middleware/user-configuration.jsdist/cmds/list.jsdist/cli.jsauth.json
Network endpoints2
dev.zuplo.comdev.zuplo.com/
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Login requests an OAuth token for https://dev.zuplo.com/.
- Authentication reads the saved access token and assigns it to the command's authentication context.
- ZUPLO_DEVELOPER_API_ENDPOINT accepts an environment override without destination validation.
- Configuration middleware sends that token in a Bearer header to the selected endpoint.
- The active list command runs authentication followed by configuration middleware.
- The manifest has no install lifecycle hooks or runtime self-dependency.
Evidence against
- Exposure requires an endpoint override and an authenticated CLI command.
- The default destination is Zuplo's API; no covert unrelated recipient was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
20 flaggeddist/source/migrate/dev-portal/handler.jsView file
1import { exec } from "node:child_process";
L2: import { mkdir, readFile, rename, stat, unlink, writeFile, } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L120};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
6const code = readFileSync(
L7: join(__dirname, '..', '..', 'node_modules', 'loglevel', 'lib', 'loglevel.js')
L8: )
...
L50: if (require.main === module) {
L51: const loglevel = build(process.stdout)
L52: loglevel.info('hello')
Findings
2 Critical11 High8 Medium7 Low
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/migrate/dev-portal/handler.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-I5ENAL3B.js
HighCopied Package Dependency Bridgedist/common/analytics/lib.js
Affected versions and remediation
This report applies to @zuplo/cli@7.8.20.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.8.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.