base44@0.1.10
Base44 CLI - Unified interface for managing Base44 applications
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe package has no lifecycle execution, but default error telemetry can exfiltrate user-supplied secrets and API bodies on failures. This warrants a warning rather than a publish block because the observed behavior is telemetry-related, not a concrete malicious installation chain.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs a Base44 CLI command that throws, such as a failed `secrets set` request.
Impact
Potential credential and sensitive project-data disclosure to a third-party telemetry endpoint.
Mechanism
Default error telemetry captures sensitive command and API context.
AI rationale
The package has no lifecycle execution, but default error telemetry can exfiltrate user-supplied secrets and API bodies on failures. This warrants a warning rather than a publish block because the observed behavior is telemetry-related, not a concrete malicious installation chain.
Evidence
dist/cli/index.jspackage.jsonbin/run.jsdist/assets/backend-runtime/main.tsdist/assets/backend-runtime/exec.ts
Network endpoints1
us.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- Default-enabled telemetry sends exceptions to PostHog.
- Exception properties include command arguments/options and API request/response bodies.
- `secrets set` accepts KEY=VALUE arguments; command failures are captured.
Evidence against
- package.json has no npm lifecycle hooks.
- The Deno execution path is an explicit CLI feature for user-provided scripts.
- No install-time persistence, payload download, or agent-control-surface writes found.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Oversized source lightweight scan
Source & flagged code
3 flaggeddist/assets/backend-runtime/main.tsView file
148try {
L149: functionModule = await import(functionPath);
L150: } catch (error) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/assets/backend-runtime/main.tsView on unpkg · L148dist/cli/index.jsView file
•path = dist/cli/index.js
kind = oversized_source_file
sizeBytes = 10808218
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/cli/index.jsView on unpkgpackage.jsonView file
•Remote tarball dependency specs: @deno/loader@https://npm.jsr.io/~/11/@jsr/deno__loader/0.5.0.tgz
Findings
6 Medium5 Low
MediumDynamic Requiredist/assets/backend-runtime/main.ts
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/cli/index.js
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependencypackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to base44@0.1.10.
See all versions of base44 for other recorded verdicts.
- Review the evidence and your use of base44@0.1.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.