base44@0.2.4
Base44 CLI - Unified interface for managing Base44 applications
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe source shows a user-supplied one-time key flowing into default error telemetry sent to the analytics service. The exposure is conditional on a command error, so the evidence supports a warning rather than a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs a session import with its one-time key and the command fails.
Impact
The one-time key may be disclosed to the analytics service when an error is reported.
Mechanism
The CLI records command options, includes them in error telemetry, and sends the report to its default analytics endpoint unless telemetry is disabled.
AI rationale
The source shows a user-supplied one-time key flowing into default error telemetry sent to the analytics service. The exposure is conditional on a command error, so the evidence supports a warning rather than a publish block.
Evidence
dist/cli/index.jspackage.json
Network endpoints1
us.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a user-run command through its binary entry point.
- A session import command accepts a one-time key from the user.
- Before a command runs, the CLI records its arguments and option values for error reporting.
- Telemetry is enabled by default and targets the analytics host shown in the source; an environment variable disables it.
- When a command fails, the CLI sends the error to the reporter.
- The report includes command options and is sent through the analytics batch endpoint, creating a conditional exposure of the one-time key.
Evidence against
- The reporting path is tied to command errors rather than an install-time hook.
- Telemetry can be disabled with an environment variable, and the key is supplied by the user for a session import.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/assets/backend-runtime/main.tsView file
148try {
L149: functionModule = await import(functionPath);
L150: } catch (error) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/assets/backend-runtime/main.tsView on unpkg · L148dist/cli/index.jsView file
•path = dist/cli/index.js
kind = oversized_source_file
sizeBytes = 11351833
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/cli/index.jsView on unpkgpackage.jsonView file
•Remote tarball dependency specs: @deno/loader@https://npm.jsr.io/~/11/@jsr/deno__loader/0.5.0.tgz
Findings
7 Medium5 Low
MediumDynamic Requiredist/assets/backend-runtime/main.ts
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/cli/index.js
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependencypackage.json
MediumAi Review Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to base44@0.2.4.
See all versions of base44 for other recorded verdicts.
- Review the evidence and your use of base44@0.2.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.