registry / @zuplo/editor / 1.0.35074213265
@zuplo/editor@1.0.35074213265
Local development editor for the Zuplo CLI
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection found library entrypoints without lifecycle scripts and resolved the flagged code to editor integrations, bundled UI components, and editor worker behavior. The network endpoints are Zuplo services, and no concrete malicious behavior was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Consumers import or use the editor; the manifest has no install lifecycle trigger.
Impact
No confirmed unauthorized credential transfer, agent configuration mutation, or other attack behavior was found.
Mechanism
The flagged configuration locations detect IDE files and format editor links or cursor styles. The child_process reference is in TypeScript worker module-name handling, and the assistant endpoint is a Zuplo service with constrained URL overrides.
AI rationale
Source inspection found library entrypoints without lifecycle scripts and resolved the flagged code to editor integrations, bundled UI components, and editor worker behavior. The network endpoints are Zuplo services, and no concrete malicious behavior was identified.
Network endpoints4
api.zuplo.com/cdn.zuplo.commcp-proxy.zuplo.ioagent-z.zuplo-exp.workers.dev/agent-z/chat
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes library entrypoints; the inspected manifest defines no lifecycle scripts.
- The flagged configuration code detects editor integrations and creates editor deep links; the other flagged location styles Monaco cursors.
- The web bundle references editor and GraphiQL components, while its configured API, CDN, MCP proxy, and assistant endpoints are Zuplo services; assistant URL overrides are limited to localhost or agent-z worker hosts.
- The worker bundles contain editor error handling, CodeMirror cursor measurement, and TypeScript handling of Node built-in module names; the child_process match is part of that module list.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flaggeddist/client/static/js/main-qHfnnuKa.jsView file
1572depsCount: ${n},
L1573: deps: ${r}}`};var i={keyword:`dependencies`,type:`object`,schemaType:`object`,error:e.error,code(e){let[t,n]=a(e);o(e,t),s(e,n)}};function a({schema:e}){let t={},n={};for(let r in ...
L1574: git clone ${i.sourceRepoUrl}
High
Child Process
Package source references child process execution.
dist/client/static/js/main-qHfnnuKa.jsView on unpkg · L1572dist/client/static/js/codemirror-6ITIKbGP.jsView file
7contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=R(i,t),o=a.text.length,d,f;function p(n,r){return jr(e,B(t,n),`div`,a,r)}function m(t,n,r){var i=Lr(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/client/static/js/codemirror-6ITIKbGP.jsView on unpkg · L7Findings
1 Critical3 High4 Medium4 Low
CriticalTrojan Source Unicodedist/client/static/js/codemirror-6ITIKbGP.js
HighChild Processdist/client/static/js/main-qHfnnuKa.js
HighCross File Remote Execution Contextdist/client/static/ts.worker-DFduhuek.js
HighSemantic Analysis Limiteddist/client/static/js/GraphiQLConsole-Bg0R8kFE.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/client/static/ts.worker-DFduhuek.js
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @zuplo/editor@1.0.35074213265.
See all versions of @zuplo/editor for other recorded verdicts.
- Review the evidence and your use of @zuplo/editor@1.0.35074213265 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.