registry / blokctl / 2.0.1

blokctl@2.0.1

cli for blok

AI Security Review

scanned 7d ago · by lpm-firewall-ai

Invoking `blokctl login --token` or `blokctl profile --token` sends the supplied token in telemetry. Telemetry also sends a hostname-derived identifier and system metadata by default.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

User runs a tracked CLI command with a token option.

Impact

Credential disclosure to a third-party telemetry endpoint.

Mechanism

Unredacted command-option telemetry to PostHog.

Attack narrative

The CLI initializes default telemetry on execution. Its command tracking serializes complete Commander option objects, while the login and profile commands expose credential-bearing `--token` options. Those options are captured by PostHog without redaction, creating a concrete credential-exfiltration path.

Rationale

Source directly establishes default remote telemetry and unredacted credential-bearing command arguments. This is concrete credential exfiltration, not merely a suspicious primitive.

Evidence

package.jsondist/index.jsdist/services/commander.jsdist/services/posthog.jsdist/commands/login/index.jsdist/commands/profile/index.js${os.homedir()}/.blok/blokctl.json

Network endpoints1

us.i.posthog.com

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

`dist/services/posthog.js` enables PostHog telemetry by default and sends hostname, OS, and command args.
`dist/commands/login/index.js` passes `--token` options unredacted to `trackCommandExecution`.
`dist/services/commander.js` forwards those args to PostHog at `https://us.i.posthog.com`.
The purported opt-out checks unrelated `NO_NANOCTL_TELEMETRY`, not a blokctl-specific variable.

Evidence against

`package.json` has no npm lifecycle hooks.
Build/deploy uploads are explicit user-invoked product operations.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

13 flagged

dist/index.jsView file

Lines 1-21javascript

1#! /usr/bin/env bun

2import child_process from "node:child_process";

3import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1

4import util from "node:util";

5import * as p from "@clack/prompts";

6import fsExtra from "fs-extra";

7import color from "picocolors";

8import { checkProject } from "./commands/check/index.js";

9import { createNode } from "./commands/create/node.js";

10import { createProject } from "./commands/create/project.js";

11import { createWorkflow } from "./commands/create/workflow.js";

12import { devProject } from "./commands/dev/index.js";

13import { program } from "./services/commander.js";

14import { setNonInteractive } from "./services/non-interactive.js";

15import { PosthogAnalytics } from "./services/posthog.js";

16import { getPackageVersion } from "./services/utils.js";

17import "./commands/login/index.js";

18import "./commands/logout/index.js";

19import "./commands/build/index.js";

20import "./commands/deploy/index.js";

21import "./commands/monitor/index.js";

•matchType = token_shingles matchedPackage = blokctl@1.2.0 matchedPath = dist/index.js matchedIdentity = npm:Ymxva2N0bA:1.2.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist/commands/create/project.jsView file

Lines 408-448javascript

408 }

409 else if (entry.isDirectory()) {

410 if (entry.name === "__tests__")

411 continue;

412 if (entry.name

dist/scaffold-repo/triggers/websocket/src/WebSocketTrigger.tsView file

Lines 361-401typescript

361

362 return {

363 onOpen: (_event, ws) => {

364 void (async () => {

365 const

dist/services/posthog.jsView file

Lines 1-29javascript

1import { randomUUID } from "node:crypto";

2import { existsSync, readFileSync, writeFileSync } from "node:fs";

3import os from "node:os";

4import { PostHog } from "posthog-node";

dist/scaffold-repo/sdks/python3/bin/worker.pyView file

•path = dist/scaffold-repo/sdks/python3/bin/worker.py kind = build_helper sizeBytes = 2018 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/scaffold-repo/sdks/python3/bin/worker.pyView on unpkg

dist/scaffold-repo/sdks/python3/tests/test_grpc_server.pyView file

•path = dist/scaffold-repo/sdks/python3/tests/test_grpc_server.py kind = payload_in_excluded_dir sizeBytes = 15496 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dist/scaffold-repo/sdks/python3/tests/test_grpc_server.pyView on unpkg

dist/commands/build/index.jsView file

•matchType = normalized_sha256 matchedPackage = blokctl@1.2.0 matchedPath = dist/commands/build/index.js matchedIdentity = npm:Ymxva2N0bA:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/build/index.jsView on unpkg

dist/commands/create/node.jsView file

•matchType = normalized_sha256 matchedPackage = blokctl@1.2.0 matchedPath = dist/commands/create/node.js matchedIdentity = npm:Ymxva2N0bA:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/create/node.jsView on unpkg

dist/commands/install/node.jsView file

•matchType = normalized_sha256 matchedPackage = blokctl@1.2.0 matchedPath = dist/commands/install/node.js matchedIdentity = npm:Ymxva2N0bA:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/install/node.jsView on unpkg

dist/commands/publish/node.jsView file

•matchType = normalized_sha256 matchedPackage = blokctl@1.2.0 matchedPath = dist/commands/publish/node.js matchedIdentity = npm:Ymxva2N0bA:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/publish/node.jsView on unpkg

Source & flagged code

13 flagged · loading source

dist/index.jsView file

1#! /usr/bin/env bun L2: import child_process from "node:child_process"; L3: import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

1Cross-file remote execution chain: dist/index.js spawns dist/commands/create/project.js; helper contains network access plus dynamic code execution. L1: #! /usr/bin/env bun L2: import child_process from "node:child_process"; L3: import os from "node:os"; ... L45: const execResponse = await exec(`npm view ${CLI_NAME} version`); L46: latestVersion = execResponse.stdout.trim(); L47: } ... L67: try { L68: const HOME_DIR = `${os.homedir()}/.blok`; L69: const cliConfigPath = `${HOME_DIR}/blokctl.json`;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

Findings

2 Critical9 High6 Medium6 Low

CriticalHardcoded Runtime Data Exfiltrationdist/services/posthog.js

CriticalTrigger Reachable Dangerous Capabilitydist/services/posthog.js

HighChild Processdist/index.js

HighShell

HighCross File Remote Execution Contextdist/index.js

HighPayload In Excluded Dirdist/scaffold-repo/sdks/python3/tests/test_grpc_server.py

HighKnown Malware Source Similaritydist/commands/build/index.js

HighKnown Malware Source Similaritydist/commands/create/node.js

HighKnown Malware Source Similaritydist/commands/install/node.js

HighKnown Malware Source Similaritydist/commands/publish/node.js

HighKnown Malware Source Similarity