registry / blokctl / 2.5.5

blokctl@2.5.5

cli for blok

AI Security Review

scanned 8d ago · by lpm-firewall-ai

The build command exposes a stored authentication token through default telemetry. This establishes a credential disclosure vulnerability, but does not establish malicious intent.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Run blokctl build with a stored token while telemetry is enabled.

Impact

The service authentication token can be disclosed to the analytics recipient.

Mechanism

Build mutates the shared options object to contain the decrypted token; telemetry subsequently captures that object without redaction.

AI rationale

Source proves a credential disclosure vulnerability through shared command options and default telemetry. Warn for this concrete risk; the inspected source does not establish malware intent.

Evidence

dist/services/local-token-manager.jsdist/commands/build/index.jsdist/services/commander.jsdist/services/posthog.js.blok/token/token.enc

Network endpoints1

us.i.posthog.com

Decision evidence

public snapshot

AI called this Suspicious at 97.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

The token manager reads and decrypts the stored authentication token.
The build command adds that token to the same options object passed to telemetry.
The command wrapper forwards the options without redaction.
Telemetry records the options after command execution and includes them in captured event properties.
Telemetry is enabled by default and targets https://us.i.posthog.com.

Evidence against

The inspected behavior fits an unsafe telemetry implementation; malicious intent was not established.
Telemetry can be disabled with NO_NANOCTL_TELEMETRY.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

Manifest

Source & flagged code

17 flagged

dist/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import child_process from "node:child_process";

3import os from "node:os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1

4import util from "node:util";

5import * as p from "@clack/prompts";

6import fsExtra from "fs-extra";

7import color from "picocolors";

8import { checkProject } from "./commands/check/index.js";

9import { createNode } from "./commands/create/node.js";

10import { createProject } from "./commands/create/project.js";

11import { addSpa, createSpa } from "./commands/create/spa.js";

12import { createWorkflow } from "./commands/create/workflow.js";

13import { devProject } from "./commands/dev/index.js";

14import { program, withErrorBoundary } from "./services/commander.js";

15import { setNonInteractive } from "./services/non-interactive.js";

16import { PosthogAnalytics } from "./services/posthog.js";

17import { getPackageVersion } from "./services/utils.js";

18import "./commands/login/index.js";

19import "./commands/logout/index.js";

20import "./commands/build/index.js";

21import "./commands/deploy/index.js";

dist/scaffold-repo/triggers/websocket/src/WebSocketTrigger.tsView file

Lines 381-421typescript

381

382 return {

383 onOpen: (_event, ws) => {

384 void (async () => {

385 const

dist/commands/inertia/ssr.jsView file

Lines 1-21javascript

1import { spawn, spawnSync } from "node:child_process";

2import { existsSync, readFileSync } from "node:fs";

3import { isAbsolute, join, resolve } from "node:path";

4const DEFAULT_URL =

dist/services/posthog.jsView file

Lines 1-29javascript

1import { randomUUID } from "node:crypto";

2import { existsSync, readFileSync, writeFileSync } from "node:fs";

3import os from "node:os";

4import { PostHog } from "posthog-node";

dist/scaffold-repo/sdks/python3/bin/worker.pyView file

•path = dist/scaffold-repo/sdks/python3/bin/worker.py kind = build_helper sizeBytes = 2018 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/scaffold-repo/sdks/python3/bin/worker.pyView on unpkg

dist/scaffold-repo/sdks/python3/tests/test_grpc_server.pyView file

•path = dist/scaffold-repo/sdks/python3/tests/test_grpc_server.py kind = payload_in_excluded_dir sizeBytes = 16689 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dist/scaffold-repo/sdks/python3/tests/test_grpc_server.pyView on unpkg

dist/commands/create/spa.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commands/create/spa.js#virtual:normalized:round1View on unpkg

dist/commands/build/index.jsView file

•matchType = normalized_sha256 matchedPackage = blokctl@2.3.0 matchedPath = dist/commands/build/index.js matchedIdentity = npm:Ymxva2N0bA:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High