registry / balena-cli / 25.2.4
balena-cli@25.2.4
The official balena Command Line Interface
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource review shows expected CLI lifecycle patching and package-aligned, configurable telemetry, not a concrete malicious chain. The scanner's shell and environment signals correspond to explicit CLI functions.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall; subsequent explicit balena CLI invocation
Impact
No unconsented credential theft, foreign control-surface mutation, or remote code execution established.
Mechanism
local dependency patching and CLI telemetry/service requests
AI rationale
Source review shows expected CLI lifecycle patching and package-aligned, configurable telemetry, not a concrete malicious chain. The scanner's shell and environment signals correspond to explicit CLI functions.
Evidence
package.jsonpatches/apply-patches.jsbuild/events.jsbuild/utils/bootstrap.jsbuild/app.jsbuild/utils/sudo.jspatches/node_modules/patch-package/index.js
Network endpoints2
balena-cli.s3.us-east-1.amazonaws.com56d2a46124614b01b0f4086897e96110:6e175465accc41b595a96947155f61fb@sentry.io/149239
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- postinstall invokes a local patch helper.
- CLI telemetry posts command metadata when enabled.
Evidence against
- The helper only runs patch-package against package-local patches; the shipped patches tree contains no patch payloads.
- Telemetry has explicit offline/opt-out environment controls.
- No AI-agent configuration access, credential harvesting, remote payload execution, or install-time persistence was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node patches/apply-patches.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgoclif.manifest.jsonView file
171patternName = generic_password
severity = medium
line = 171
matchedText = "descrip...\n",
Medium
772patternName = generic_password
severity = medium
line = 772
matchedText = "descrip...\n",
Medium
Findings
3 High9 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitybuild/utils/sudo.js
HighSemantic Analysis Limitedbuild/utils/compose.js
MediumSecret Patternoclif.manifest.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/dev.cmd
MediumStructural Risk Force Deep Review
MediumSecret Patternoclif.manifest.json
MediumSecret Patternoclif.manifest.json
MediumSecret Patternbuild/utils/messages.js
MediumSecret Patternsrc/utils/messages.ts
LowNon Install Lifecycle Scripts
Low
Affected versions and remediation
This report applies to balena-cli@25.2.4.
See all versions of balena-cli for other recorded verdicts.
- Review the evidence and your use of balena-cli@25.2.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.