registry / @zuplo/editor / 1.0.35137166429
@zuplo/editor@1.0.35137166429
Local development editor for the Zuplo CLI
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection supports a clean verdict: the manifest describes a local editor, and the flagged agent and execution indicators resolve to editor behavior and compiler metadata in the reviewed excerpts. The scanner hints do not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
No malicious trigger was established; the reviewed preference route is used to select an editor for opening files.
Impact
No unauthorized configuration change, credential transfer, or other attack impact was established.
Mechanism
The inspected code stores a validated editor preference and constructs editor-specific open URLs; the flagged worker excerpt lists module names without showing process execution.
AI rationale
Source inspection supports a clean verdict: the manifest describes a local editor, and the flagged agent and execution indicators resolve to editor behavior and compiler metadata in the reviewed excerpts. The scanner hints do not establish malicious behavior.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest describes a local development editor and exports its runtime from dist; it declares no lifecycle hook.
- The .cursor match is part of IDE detection data, and the server route accepts a known editor preference for opening files.
- The editor.api2 match is Monaco cursor styling for editor cursor classes, not agent configuration.
- The main bundle shows a dialog for choosing an editor and saving that preference.
- The reviewed large-bundle excerpts show browser editor and worker code; the child_process match is within a string listing Node built-in module names, with no execution shown.
Evidence against
- Scanner findings include network and child-process references, but the inspected excerpts do not establish an attack path.
- Searches of the flagged CodeMirror file found no common bidirectional control characters used in Trojan Source attacks.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggeddist/client/static/js/codemirror-6ITIKbGP.jsView file
7contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=R(i,t),o=a.text.length,d,f;function p(n,r){return jr(e,B(t,n),`div`,a,r)}function m(t,n,r){var i=Lr(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/client/static/js/codemirror-6ITIKbGP.jsView on unpkg · L7dist/client/static/ts.worker-DFduhuek.jsView file
6Cross-file remote execution chain: dist/client/static/ts.worker-DFduhuek.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L6: `).slice(2).join(`
L7: `))}},ee=class extends Error{constructor(e,t){super(e),this.name=`ListenerLeakError`,this.stack=t}},te=class extends Error{constructor(e,t){super(e),this.name=`ListenerRefusalError...
L8: `||e===` `}var li=class{constructor(e,t,n){this.changes=e,this.moves=t,this.hitTimeout=n}},ui=class{constructor(e,t){this.lineRangeMapping=e,this.changes=t}};function di(e,t,n=(e,t...
...
L43: `)}t.writeSync(r,`]
L44: `),t.closeSync(r),br(`endDumpTypes`),xr(`Dump types`,`beginDumpTypes`,`endDumpTypes`)}function x(){o&&t.writeFileSync(o,JSON.stringify(s))}e.dumpLegend=x})(Mr||={});var Nr=Mr.start...
L45: `,n=c;continue}c++}r
Findings
1 Critical2 High4 Medium5 Low
CriticalTrojan Source Unicodedist/client/static/js/codemirror-6ITIKbGP.js
HighChild Process
HighCross File Remote Execution Contextdist/client/static/ts.worker-DFduhuek.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/client/static/ts.worker-DFduhuek.js
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @zuplo/editor@1.0.35137166429.
See all versions of @zuplo/editor for other recorded verdicts.
- Review the evidence and your use of @zuplo/editor@1.0.35137166429 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.