@zuplo/editor@1.0.41499262393
Local development editor for the Zuplo CLI
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe editor bundle sends default runtime analytics for typing and pasting that include account, project, environment, and file identifiers. This is identifying telemetry to an analytics service, so it warrants a warning; the other flagged findings are consistent with normal editor and TypeScript worker code.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
When the editor is used and a user types or pastes in a file.
Impact
Analytics receives identifiable account, project, environment, and file metadata alongside editing activity.
Mechanism
It captures file and project metadata plus typing or paste counts through PostHog analytics; source contents are not included in the observed payload.
AI rationale
The editor bundle sends default runtime analytics for typing and pasting that include account, project, environment, and file identifiers. This is identifying telemetry to an analytics service, so it warrants a warning; the other flagged findings are consistent with normal editor and TypeScript worker code.
Evidence
dist/client/static/js/main-CY4Zq3l6.js
Network endpoints1
us.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The editor reports typing events with account, project, environment, file name and extension, directory, character and keystroke counts, and duration.
- Paste events report the file name and extension, directory, pasted character and line counts, and whether the paste was large; the payload does not include source text.
- These events are sent through the app’s PostHog capture client, whose host mapping includes us.i.posthog.com.
- The package describes itself as a local development editor for the Zuplo CLI and exports editor library entry points.
Evidence against
- The package manifest has no lifecycle scripts or executable bin.
- The flagged Unicode characters appear in a CodeMirror pattern that detects and displays invisible and directional characters.
- The TypeScript worker’s child_process match is in a list of Node built-in module names; the worker initializes TypeScript and handles browser worker messages.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggeddist/client/static/js/codemirror-DualXd8q.jsView file
7contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=R(i,t),o=a.text.length,d,f;function p(n,r){return jr(e,B(t,n),`div`,a,r)}function m(t,n,r){var i=Lr(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/client/static/js/codemirror-DualXd8q.jsView on unpkg · L7dist/client/static/ts.worker-CpVDZSME.jsView file
6Cross-file remote execution chain: dist/client/static/ts.worker-CpVDZSME.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L6: `).slice(2).join(`
L7: `))}},ee=class extends Error{constructor(e,t){super(e),this.name=`ListenerLeakError`,this.stack=t}},te=class extends Error{constructor(e,t){super(e),this.name=`ListenerRefusalError...
L8: `||e===` `}var li=class{constructor(e,t,n){this.changes=e,this.moves=t,this.hitTimeout=n}},ui=class{constructor(e,t){this.lineRangeMapping=e,this.changes=t}};function di(e,t,n=(e,t...
...
L30: this file except in compliance with the License. You may obtain a copy of the
L31: License at http://www.apache.org/licenses/LICENSE-2.0
L32:
...
L8981: /**
L8982: * The **\`ClipboardItem\`** interface of the Clipboard API represents
Findings
1 Critical2 High6 Medium3 Low
CriticalTrojan Source Unicodedist/client/static/js/codemirror-DualXd8q.js
HighChild Process
HighCross File Remote Execution Contextdist/client/static/ts.worker-CpVDZSME.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/client/static/js/main-CY4Zq3l6.js
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/client/static/js/main-CY4Zq3l6.js
MediumAi Review Evidencedist/client/static/js/main-CY4Zq3l6.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @zuplo/editor@1.0.41499262393.
See all versions of @zuplo/editor for other recorded verdicts.
- Review the evidence and your use of @zuplo/editor@1.0.41499262393 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.