registry / @zuplo/cli / 7.9.15
@zuplo/cli@7.9.15
⚠ Under review<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe inspected behaviors are consistent with CLI telemetry and configured runtime logging, and the scanner hints alone do not establish malicious behavior. The required clean citation coverage exceeds the eight-citation limit, so the source-grounded outcome is manual review rather than a clean mark.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the CLI triggers invocation analytics unless ZUPLO_DO_NOT_TRACK is set; runtime log delivery requires configured runtime logging settings.
Impact
The inspected behavior supports normal telemetry and configured logging; no confirmed unauthorized credential theft or unrelated data exfiltration was established.
Mechanism
Analytics records invocation and selected account, project, user ID, and CI properties. Runtime logging sends log entries to the configured remote log URL with the configured token.
AI rationale
The inspected behaviors are consistent with CLI telemetry and configured runtime logging, and the scanner hints alone do not establish malicious behavior. The required clean citation coverage exceeds the eight-citation limit, so the source-grounded outcome is manual review rather than a clean mark.
Decision evidence
public snapshotAI called this Manual Review at 69.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The executable entrypoint imports the CLI, whose startup includes analytics code.
- Analytics is disabled when ZUPLO_DO_NOT_TRACK is set; otherwise it initializes a PostHog client with the configured capture key and host.
- CLI invocation analytics records the command and version, and event properties can include account, project, user ID, and CI values.
- The runtime remote log path requires a configured URL, logging ID, and token, and is used to send runtime log entries.
- The inspected source supports ordinary vendor analytics and configured runtime logging; it did not establish a concrete malicious action.
Evidence against
- The clean result requires citations for ten distinct paths, but the citation limit is eight; the available citations do not cover the required set.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
21 flaggeddist/source/ai-gateway/package.test.jsView file
1import assert from "node:assert/strict";
L2: import { execFile } from "node:child_process";
L3: import { cp, mkdir, mkdtemp, rm, symlink, writeFile } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/ai-gateway/package.test.jsView on unpkg · L1dist/source/migrate/dev-portal/handler.jsView file
20};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
3 Critical11 High8 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationnode_modules/@zuplo/runtime/out/esm/chunk-CBNXKT6K.js
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/ai-gateway/package.test.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-CBNXKT6K.js
Affected versions and remediation
This report applies to @zuplo/cli@7.9.15.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.9.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.