registry / blokctl / 2.2.1

blokctl@2.2.1

cli for blok

AI Security Review

scanned 26d ago · by lpm-firewall-ai

Running any blokctl command initializes PostHog telemetry. It sends host and command metadata by default, including supplied command arguments and errors.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

User runs the blokctl CLI.

Impact

Command arguments or error messages may disclose sensitive user-provided data to an external analytics service.

Mechanism

Default command telemetry sent to PostHog.

AI rationale

Source inspection found no install lifecycle hook or concealed execution chain, but confirmed default external telemetry that can transmit command arguments and error text. This is suspicious data collection rather than sufficient evidence of malware.

Evidence

dist/index.jsdist/services/posthog.js~/.blok/blokctl.json

Network endpoints1

us.i.posthog.com

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Each CLI invocation creates analytics and sends telemetry by default.
Telemetry includes hostname-derived machine ID, OS details, command arguments, and error text.
The only opt-out checks a differently named NANOCTL environment variable.

Evidence against

package.json has no preinstall, install, or postinstall hook.
The reported Python file is a localhost gRPC test, and the WebSocket source contains no dynamic require.
The AI generation and project-writing paths are invoked by explicit CLI commands.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 244 file(s), 2.96 MB of source, external domains: adoptium.net, api.example.com, atomic.deskree.com, blok.build, blok.dev, catfact.ninja, cdn.jsdelivr.net, countriesnow.space, dart.dev, dashboard.stripe.com, deskree.com, docs.blok.io, dotnet.microsoft.com, elixir-lang.org, example.com, fb.me, fonts.googleapis.com, fulfillment.internal, getcomposer.org, github.com, go.dev, hooks.example.com, httpbin.org, json-schema.org, maven.apache.org, openrouter.ai, php.net, python.org, react.dev, reactflow.dev, registry.npmjs.org, ruby-lang.org, runner-dev.dac-us-east-1.deskree.com, runner.dac-us-east-1.deskree.com, rustup.rs, swift.org, us.i.posthog.com, www.w3.org

Source & flagged code

8 flagged

dist/index.jsView file

Lines 1-21javascript

1#! /usr/bin/env bun

2import child_process from "node:child_process";

3import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1

4import util from "node:util";

5import * as p from "@clack/prompts";

6import fsExtra from "fs-extra";

7import color from "picocolors";

8import { checkProject } from "./commands/check/index.js";

9import { createNode } from "./commands/create/node.js";

10import { createProject } from "./commands/create/project.js";

11import { createWorkflow } from "./commands/create/workflow.js";

12import { devProject } from "./commands/dev/index.js";

13import { program, withErrorBoundary } from "./services/commander.js";

14import { setNonInteractive } from "./services/non-interactive.js";

15import { PosthogAnalytics } from "./services/posthog.js";

16import { getPackageVersion } from "./services/utils.js";

17import "./commands/login/index.js";

18import "./commands/logout/index.js";

19import "./commands/build/index.js";

20import "./commands/deploy/index.js";

21import "./commands/monitor/index.js";

dist/scaffold-repo/triggers/websocket/src/WebSocketTrigger.tsView file

Lines 381-421typescript

381

382 return {

383 onOpen: (_event, ws) => {

384 void (async () => {

385 const

dist/services/posthog.jsView file

Lines 1-29javascript

1import { randomUUID } from "node:crypto";

2import { existsSync, readFileSync, writeFileSync } from "node:fs";

3import os from "node:os";

4import { PostHog } from "posthog-node";

dist/scaffold-repo/sdks/python3/bin/worker.pyView file

•path = dist/scaffold-repo/sdks/python3/bin/worker.py kind = build_helper sizeBytes = 2018 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/scaffold-repo/sdks/python3/bin/worker.pyView on unpkg

dist/scaffold-repo/sdks/python3/tests/test_grpc_server.pyView file

•path = dist/scaffold-repo/sdks/python3/tests/test_grpc_server.py kind = payload_in_excluded_dir sizeBytes = 16016 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dist/scaffold-repo/sdks/python3/tests/test_grpc_server.pyView on unpkg

dist/commands/generate/NodeFileWriter.jsView file

•matchType = normalized_sha256 matchedPackage = blokctl@2.0.1 matchedPath = [redacted].js matchedIdentity = npm:Ymxva2N0bA:2.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/generate/NodeFileWriter.jsView on unpkg

Source & flagged code

8 flagged · loading source

dist/index.jsView file

1#! /usr/bin/env bun L2: import child_process from "node:child_process"; L3: import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

1Cross-file remote execution chain: dist/index.js spawns dist/commands/create/project.js; helper contains network access plus dynamic code execution. L1: #! /usr/bin/env bun L2: import child_process from "node:child_process"; L3: import os from "node:os"; ... L46: const execResponse = await exec(`npm view ${CLI_NAME} version`); L47: latestVersion = execResponse.stdout.trim(); L48: } ... L68: try { L69: const HOME_DIR = `${os.homedir()}/.blok`; L70: const cliConfigPath = `${HOME_DIR}/blokctl.json`;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1

dist/scaffold-repo/triggers/websocket/src/WebSocketTrigger.tsView file

Findings

2 Critical5 High5 Medium5 Low

CriticalHardcoded Runtime Data Exfiltrationdist/services/posthog.js

CriticalTrigger Reachable Dangerous Capabilitydist/services/posthog.js

HighChild Processdist/index.js

HighShell

HighCross File Remote Execution Contextdist/index.js

HighPayload In Excluded Dirdist/scaffold-repo/sdks/python3/tests/test_grpc_server.py

HighKnown Malware Source Similaritydist/commands/generate/NodeFileWriter.js

MediumDynamic Requiredist/scaffold-repo/triggers/websocket/src/WebSocketTrigger.ts

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist/scaffold-repo/sdks/python3/bin/worker.py

Medium

Affected versions and remediation

This report applies to blokctl@2.2.1.

See version security history for other recorded verdicts.

Review the evidence and your use of blokctl@2.2.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-13 01:03:14.945Z (UTC).