registry / @zuplo/editor / 1.0.39729182240
@zuplo/editor@1.0.39729182240
Local development editor for the Zuplo CLI
AI Security Review
scanned 14d ago · by lpm-firewall-aiSource inspection found no install hooks or malicious behavior. The flagged Unicode and worker code correspond to normal editor layout and language-service functions, while assistant requests are user-triggered and sent to the configured Zuplo worker.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user submits a message in the assistant panel or responds to a tool approval request.
Impact
The service receives data entered or approved by the user for the assistant feature; no unauthorized collection or system mutation was found.
Mechanism
The frontend sends the message or approval, account and project context, session data, and a bearer token to the assistant API. The default endpoint is the Zuplo hosted worker; overrides are restricted to localhost or the worker host family.
AI rationale
Source inspection found no install hooks or malicious behavior. The flagged Unicode and worker code correspond to normal editor layout and language-service functions, while assistant requests are user-triggered and sent to the configured Zuplo worker.
Network endpoints1
agent-z.zuplo-exp.workers.dev/agent-z/chat
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest exports local editor entrypoints and declares no lifecycle hooks.
- The app routes requests through its editor API and serves its local interface.
- The assistant defaults to a Zuplo hosted worker; overrides are limited to localhost or the worker host family.
- A user-submitted message sends the prompt and Zuplo account, project, and session context with a bearer token to the assistant API.
- The JSON worker enables network fetches only when schema requests are enabled.
- The flagged invisible character is used in an editor layout probe; the flagged TypeScript worker contains module-analysis logic.
Evidence against
- The flagged Unicode character has a visible editor-layout purpose, and the worker code is consistent with bundled editor language services.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
4 flaggeddist/client/static/js/codemirror-6ITIKbGP.jsView file
7contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=R(i,t),o=a.text.length,d,f;function p(n,r){return jr(e,B(t,n),`div`,a,r)}function m(t,n,r){var i=Lr(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/client/static/js/codemirror-6ITIKbGP.jsView on unpkg · L7dist/client/static/ts.worker-DFduhuek.jsView file
6Cross-file remote execution chain: dist/client/static/ts.worker-DFduhuek.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L6: `).slice(2).join(`
L7: `))}},ee=class extends Error{constructor(e,t){super(e),this.name=`ListenerLeakError`,this.stack=t}},te=class extends Error{constructor(e,t){super(e),this.name=`ListenerRefusalError...
L8: `||e===` `}var li=class{constructor(e,t,n){this.changes=e,this.moves=t,this.hitTimeout=n}},ui=class{constructor(e,t){this.lineRangeMapping=e,this.changes=t}};function di(e,t,n=(e,t...
...
L43: `)}t.writeSync(r,`]
L44: `),t.closeSync(r),br(`endDumpTypes`),xr(`Dump types`,`beginDumpTypes`,`endDumpTypes`)}function x(){o&&t.writeFileSync(o,JSON.stringify(s))}e.dumpLegend=x})(Mr||={});var Nr=Mr.start...
L45: `,n=c;continue}c++}r
Findings
1 Critical1 High5 Medium5 Low
CriticalTrojan Source Unicodedist/client/static/js/codemirror-6ITIKbGP.js
HighCross File Remote Execution Contextdist/client/static/ts.worker-DFduhuek.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/client/static/ts.worker-DFduhuek.js
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @zuplo/editor@1.0.39729182240.
See all versions of @zuplo/editor for other recorded verdicts.
- Review the evidence and your use of @zuplo/editor@1.0.39729182240 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.