registry / blokctl / 1.3.0

blokctl@1.3.0

cli for blok

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The CLI initializes telemetry on import/runtime and captures command options. Several commands accept secret-bearing options, which are forwarded to PostHog without redaction.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running blokctl commands with secret options such as login --token, generate --api-key, profile/watch/monitor --token

Impact

User access tokens and API keys can be sent to a third-party telemetry endpoint.

Mechanism

unredacted telemetry exfiltration of CLI args

Attack narrative

On CLI startup, analytics is constructed with default-enabled PostHog. Command wrappers pass the raw Commander options object to trackCommandExecution, and posthog.js serializes args into cli_command event properties. Commands such as login --token, generate --api-key, watch/profile/monitor --token therefore can leak credentials to PostHog when run successfully.

Rationale

Source inspection confirms default-on telemetry captures unredacted command arguments that include credential-bearing flags. This is concrete credential/data exfiltration behavior, not merely package-aligned network use. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.

Evidence

dist/services/posthog.jsdist/services/commander.jsdist/commands/login/index.jsdist/commands/generate/index.jsdist/commands/profile/index.jsdist/commands/watch/index.jsdist/commands/monitor/index.js~/.blok/blokctl.json~/.blok/token/token.enc

Network endpoints3

us.i.posthog.com/public/deployment

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Malware with medium false-positive risk.

Evidence for warning

dist/services/posthog.js enables PostHog telemetry by default to https://us.i.posthog.com.
dist/services/posthog.js sends command args in cli_command events without redaction.
dist/commands/login/index.js passes options to telemetry; --token is included in options.
dist/commands/generate/index.js passes options to telemetry; --api-key can include OPENAI/API credentials.
dist/commands/profile/index.js, dist/commands/watch/index.js, and dist/commands/monitor/index.js expose --token and pass options to telemetry.

Evidence against

package.json has no install/postinstall/preinstall lifecycle hooks.
dist/index.js child_process usage is a CLI version check via npm view blokctl version.
dist/commands/create/project.js git clone/install/file writes are user-invoked project scaffolding behavior.
dist/services/observability-stack.real-prometheus.test.js docker/fetch usage is test-only and env-gated.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVars

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-21javascript

1#! /usr/bin/env bun

2import child_process from "node:child_process";

3import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

4import util from "node:util";

5import * as p from "@clack/prompts";

6import fsExtra from "fs-extra";

7import color from "picocolors";

8import { checkProject } from "./commands/check/index.js";

9import { createNode } from "./commands/create/node.js";

10import { createProject } from "./commands/create/project.js";

11import { createWorkflow } from "./commands/create/workflow.js";

12import { devProject } from "./commands/dev/index.js";

13import { program } from "./services/commander.js";

14import { setNonInteractive } from "./services/non-interactive.js";

15import { PosthogAnalytics } from "./services/posthog.js";

16import { getPackageVersion } from "./services/utils.js";

17import "./commands/login/index.js";

18import "./commands/logout/index.js";

19import "./commands/build/index.js";

20import "./commands/deploy/index.js";

21import "./commands/monitor/index.js";

dist/services/observability-stack.real-prometheus.test.jsView file

Lines 1-21javascript

1import { spawnSync } from "node:child_process";

2import { randomBytes } from "node:crypto";

3import { describe, expect, it } from "vitest";

4const RUN =

dist/commands/create/project.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = blokctl@1.2.0 matchedIdentity = npm:Ymxva2N0bA:1.2.0 similarity = 0.950 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/commands/create/project.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/index.jsView file

1#! /usr/bin/env bun L2: import child_process from "node:child_process"; L3: import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

dist/services/observability-stack.real-prometheus.test.jsView file

1import { spawnSync } from "node:child_process"; L2: import { randomBytes } from "node:crypto"; L3: import { describe, expect, it } from "vitest"; L4: const RUN = process.env.BLOK_INTEGRATION_PROMETHEUS; L5: const d = RUN ? describe : describe.skip; L6: const PROMETHEUS_API = process.env.BLOK_PROMETHEUS_API_URL ?? "http://localhost:9090"; L7: function run(command, args) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/services/observability-stack.real-prometheus.test.jsView on unpkg · L1

dist/commands/create/project.js

Findings

1 Critical3 High5 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/commands/create/project.js

HighChild Processdist/index.js

HighShell

HighSame File Env Network Executiondist/services/observability-stack.real-prometheus.test.js

MediumDynamic Require

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings