@zuplo/cli@7.9.18

⚠ Under review

<p align="center"> <a href="https://zuplo.com"> <img src="https://portal.zuplo.com/zuplo.svg" height="96"> <h3 align="center">Zuplo</h3> </a> </p> <p align="center">Zuplo's API Gateway helps small and large teams get APIs to production that ar

AI Security Review

scanned 27d ago · by lpm-firewall-ai

The manifest and inspected source excerpts do not confirm malicious behavior, and the runtime log transfer appears to be a configured logging feature. Required finding paths remain unresolved, including a binary archive that cannot be cited as source, so the evidence is insufficient to mark the package clean or establish an attack.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Unresolved; no attack trigger was confirmed in the inspected excerpts.

Impact

The unresolved files prevent a supported clean verdict, but the inspected excerpts do not demonstrate harm.

Mechanism

The available runtime excerpt sends logs only when logging configuration is present; it does not establish credential harvesting or unrelated exfiltration.

AI rationale

Decision evidence

public snapshot

AI called this Manual Review at 70.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json identifies the Zuplo CLI and exposes zup.js, with no lifecycle scripts in the inspected manifest.
The runtime log sender requires configured remote log URL, logging ID, and token before sending logs.
The core bundle reads process environment and the local .env.zuplo configuration for runtime setup.
The required archive path is binary and cannot be verified using the required source citation method, so the flagged artifact remains unresolved.

Evidence against

The inspected runtime transfer is gated by configured logging credentials and sends runtime logs.
The inspected test, migration, analytics, machine-id, and editor excerpts do not establish the flagged attack behavior.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

Source & flagged code

21 flagged

dist/source/ai-gateway/package.test.jsView file

1import assert from "node:assert/strict"; L2: import { execFile } from "node:child_process"; L3: import { cp, mkdir, mkdtemp, rm, symlink, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/source/ai-gateway/package.test.jsView on unpkg · L1

dist/source/migrate/dev-portal/handler.jsView file

20}; L21: const execAsync = promisify(exec); L22: export const migrateDevPortal = async (args) => {

High

Shell

Package source references shell execution.

dist/source/migrate/dev-portal/handler.jsView on unpkg · L20

node_modules/pino/benchmarks/utils/wrap-log-level.jsView file

Findings

3 Critical11 High8 Medium7 Low

CriticalHardcoded Runtime Data Exfiltrationnode_modules/@zuplo/runtime/out/esm/chunk-GYEX3OZM.js

CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js

CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js

HighChild Processdist/source/ai-gateway/package.test.js

HighShelldist/source/migrate/dev-portal/handler.js

HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js

HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js

HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js

HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-GYEX3OZM.js

Affected versions and remediation

This report applies to @zuplo/cli@7.9.18.

See all versions of @zuplo/cli for other recorded verdicts.

Review the evidence and your use of @zuplo/cli@7.9.18 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-09 07:37:25.698Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @zuplo/cli / 7.9.18

@zuplo/cli@7.9.18

⚠ Under review

AI Security Review

scanned 27d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Unresolved; no attack trigger was confirmed in the inspected excerpts.

Impact

The unresolved files prevent a supported clean verdict, but the inspected excerpts do not demonstrate harm.

Mechanism

The available runtime excerpt sends logs only when logging configuration is present; it does not establish credential harvesting or unrelated exfiltration.

AI rationale

Decision evidence

public snapshot

AI called this Manual Review at 70.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json identifies the Zuplo CLI and exposes zup.js, with no lifecycle scripts in the inspected manifest.
The runtime log sender requires configured remote log URL, logging ID, and token before sending logs.
The core bundle reads process environment and the local .env.zuplo configuration for runtime setup.
The required archive path is binary and cannot be verified using the required source citation method, so the flagged artifact remains unresolved.

Evidence against

The inspected runtime transfer is gated by configured logging credentials and sends runtime logs.
The inspected test, migration, analytics, machine-id, and editor excerpts do not establish the flagged attack behavior.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

Source & flagged code

21 flagged

dist/source/ai-gateway/package.test.jsView file

1import assert from "node:assert/strict"; L2: import { execFile } from "node:child_process"; L3: import { cp, mkdir, mkdtemp, rm, symlink, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/source/ai-gateway/package.test.jsView on unpkg · L1

dist/source/migrate/dev-portal/handler.jsView file

20}; L21: const execAsync = promisify(exec); L22: export const migrateDevPortal = async (args) => {

High

Shell

Package source references shell execution.

dist/source/migrate/dev-portal/handler.jsView on unpkg · L20

node_modules/pino/benchmarks/utils/wrap-log-level.jsView file

Findings

3 Critical11 High8 Medium7 Low

CriticalHardcoded Runtime Data Exfiltrationnode_modules/@zuplo/runtime/out/esm/chunk-GYEX3OZM.js

CriticalCredential Exfiltrationnode_modules/@zuplo/core/zeno.js

CriticalTrojan Source Unicodenode_modules/@zuplo/editor/dist/client/static/js/codemirror-6ITIKbGP.js

HighChild Processdist/source/ai-gateway/package.test.js

HighShelldist/source/migrate/dev-portal/handler.js

HighSame File Env Network Executionnode_modules/@zuplo/core/customer.cli.minified.js

HighCredential Redirect Persistencenode_modules/@zuplo/core/customer.cli.minified.js

HighCommand Output Exfiltrationnode_modules/@zuplo/core/customer.cli.minified.js

HighCloud Metadata Accessnode_modules/@zuplo/runtime/out/esm/chunk-GYEX3OZM.js

Affected versions and remediation

This report applies to @zuplo/cli@7.9.18.

See all versions of @zuplo/cli for other recorded verdicts.

Review the evidence and your use of @zuplo/cli@7.9.18 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-09 07:37:25.698Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.