base44@0.1.31
Base44 CLI - Unified interface for managing Base44 applications
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe inspected behaviors fit a CLI that runs user-selected local functions and obtains service tokens for them. The configurable API destination leaves a conditional credential-handling risk, but the inspected source does not establish an unrestricted destination or concrete attack, so a warning is appropriate.
Static reason
One or more suspicious static signals were detected.
Trigger
A user starts a local function through the CLI; the service-token request occurs when the function uses its service client.
Impact
A local function can access the inherited environment under the runtime's broad permissions. Conditional credential exposure to an unintended API destination is not established by the inspected source.
Mechanism
The CLI passes the process environment to a Deno child launched with `--allow-all`. The service client signs an assertion with the actor private key and posts it to a URL derived from `BASE44_API_URL`.
AI rationale
The inspected behaviors fit a CLI that runs user-selected local functions and obtains service tokens for them. The configurable API destination leaves a conditional credential-handling risk, but the inspected source does not establish an unrestricted destination or concrete attack, so a warning is appropriate.
Decision evidence
public snapshotAI called this Suspicious at 76.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package is a Base44 CLI whose executable invokes its CLI entry point; the manifest declares no install lifecycle hook.
- When the CLI starts a local function, it launches Deno with `--allow-all` and passes through the caller's environment to the child process.
- The runtime imports the selected user function, consistent with locally running project code.
- The service client signs an assertion using an actor private key and posts it to a URL based on `BASE44_API_URL`, which can be overridden through the environment.
Evidence against
- The package has no preinstall, install, or postinstall script.
- The service-token request is part of the actor service-client flow and targets the configured Base44 API URL; inspected code does not show a package-controlled recipient.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/assets/backend-runtime/main.tsView file
148try {
L149: functionModule = await import(functionPath);
L150: } catch (error) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/assets/backend-runtime/main.tsView on unpkg · L148dist/cli/index.jsView file
•path = dist/cli/index.js
kind = oversized_source_file
sizeBytes = 11224456
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/cli/index.jsView on unpkgpackage.jsonView file
•Remote tarball dependency specs: @deno/loader@https://npm.jsr.io/~/11/@jsr/deno__loader/0.5.0.tgz
Findings
7 Medium5 Low
MediumDynamic Requiredist/assets/backend-runtime/main.ts
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/cli/index.js
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependencypackage.json
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to base44@0.1.31.
See all versions of base44 for other recorded verdicts.
- Review the evidence and your use of base44@0.1.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.