registry / @zuplo/cli / 7.9.16
@zuplo/cli@7.9.16
⚠ Under review<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe inspected source does not support a concrete malicious behavior or warning. A clean verdict requires citations for ten distinct paths but the schema allows at most eight, so the result remains manual review.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the CLI loads its entrypoint and analytics code.
Impact
No confirmed attack impact; the package cannot be cleared under the required citation coverage constraint.
Mechanism
The inspected analytics code has an opt-out and captures invocation properties; it does not establish credential forwarding or an attack sink.
AI rationale
The inspected source does not support a concrete malicious behavior or warning. A clean verdict requires citations for ten distinct paths but the schema allows at most eight, so the result remains manual review.
Evidence
package.jsonzup.jsdist/cli.jsdist/common/analytics/lib.js
Decision evidence
public snapshotAI called this Manual Review at 61.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package exposes a CLI through zup.js, which imports dist/cli.js.
- The CLI imports analytics capture and shutdown functions.
- Analytics can be disabled with ZUPLO_DO_NOT_TRACK; otherwise it includes CI and an invocation identifier in captured events.
- The clean decision requires citations for ten distinct paths, while the output permits at most eight citations.
Evidence against
- The inspected package entrypoint has no install lifecycle hook.
- The inspected analytics code does not establish credential collection or an unrestricted credential destination.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
21 flaggeddist/source/ai-gateway/package.test.jsView file
1import assert from "node:assert/strict";
L2: import { execFile } from "node:child_process";
L3: import { cp, mkdir, mkdtemp, rm, symlink, writeFile } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/source/ai-gateway/package.test.jsView on unpkg · L1dist/source/migrate/dev-portal/handler.jsView file
20};
L21: const execAsync = promisify(exec);
L22: export const migrateDevPortal = async (args) => {
High
Shell
Package source references shell execution.
dist/source/migrate/dev-portal/handler.jsView on unpkg · L20node_modules/pino/benchmarks/utils/wrap-log-level.jsView file
Findings
3 Critical11 High8 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationnode_modules/@zuplo/runtime/out/esm/chunk-DTOTMTMD.js
CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js
CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/source/ai-gateway/package.test.js
HighShelldist/source/migrate/dev-portal/handler.js
HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js
HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js
HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js
HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-DTOTMTMD.js
Affected versions and remediation
This report applies to @zuplo/cli@7.9.16.
See all versions of @zuplo/cli for other recorded verdicts.
- Review the evidence and your use of @zuplo/cli@7.9.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.