base44@0.1.16
Base44 CLI - Unified interface for managing Base44 applications
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe manifest provides a user-invoked CLI entrypoint without an npm install lifecycle hook, and the inspected runtime and telemetry behavior are consistent with that purpose. Telemetry includes user-linked error context but targets the named PostHog service and has an environment-variable opt-out; no concrete malicious chain was found.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the base44 CLI; telemetry is activated when an error is captured unless disabled.
Impact
Telemetry can disclose error and command context to the configured-in-source analytics service. No unrelated credential recipient or install-time mutation was identified.
Mechanism
The bundled CLI sends error context to us.i.posthog.com, using the user's email when available; the runtime loads the function named by FUNCTION_PATH.
AI rationale
The manifest provides a user-invoked CLI entrypoint without an npm install lifecycle hook, and the inspected runtime and telemetry behavior are consistent with that purpose. Telemetry includes user-linked error context but targets the named PostHog service and has an environment-variable opt-out; no concrete malicious chain was found.
Network endpoints1
us.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI entrypoint and has no preinstall, install, or postinstall hook; its remote tarball dependency is @deno/loader.
- bin/run.js invokes the bundled CLI when the user runs the command.
- CLI telemetry is disabled by BASE44_DISABLE_TELEMETRY=1 and targets us.i.posthog.com.
- Error telemetry may use the authenticated user's email as its distinct ID.
- The backend wrapper dynamically imports the function path supplied through FUNCTION_PATH.
Evidence against
- Inspected behavior is consistent with an application-management CLI: telemetry is sent to a named analytics service and local runtime imports a caller-selected function.
- No inspected source showed an install-time attack, credential forwarding to an unrelated recipient, or a malicious payload chain.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetry
Source & flagged code
4 flaggeddist/assets/backend-runtime/main.tsView file
148try {
L149: functionModule = await import(functionPath);
L150: } catch (error) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/assets/backend-runtime/main.tsView on unpkg · L148dist/cli/index.jsView file
•path = dist/cli/index.js
kind = oversized_source_file
sizeBytes = 10848480
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/cli/index.jsView on unpkgpackage.jsonView file
•Remote tarball dependency specs: @deno/loader@https://npm.jsr.io/~/11/@jsr/deno__loader/0.5.0.tgz
Findings
6 Medium6 Low
MediumDynamic Requiredist/assets/backend-runtime/main.ts
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/cli/index.js
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependencypackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to base44@0.1.16.
See all versions of base44 for other recorded verdicts.
- Review the evidence and your use of base44@0.1.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.