registry / AI-agent capability abuse / burnboard-cli / 0.4.6

burnboard-cli@0.4.6

Connect local AI coding token usage to BurnBoard

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package implements a real persistent collection and upload capability that changes an AI-tool configuration and self-updates. Because activation follows an explicit CLI sign-in and there is no npm lifecycle hook, this warrants a warning rather than a publication block.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The user runs the CLI and completes sign-in, or later runs setup, sync, or the installed scheduled job.

Impact

It changes Claude configuration, persists background jobs, and sends local AI usage metadata to BurnBoard.

Mechanism

Local AI usage collection, upload, and recurring self-update setup.

AI rationale

Evidence

cli.mjsinstall/burnboard-agent.mjsinstall/burnboard-setup.sh$HOME/.burnboard/agent.mjs$HOME/.burnboard/config.json$HOME/.claude/settings.jsoncrontab

Network endpoints2

burnboard.cc127.0.0.1

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The agent reads local Codex session files and uploads collected usage buckets with a stored bearer token.
The setup script alters Claude settings and creates recurring sync plus automatic latest-version update jobs.
A successful interactive sign-in automatically launches the installer and enables five-minute syncing.

Evidence against

package.json has no preinstall, install, or postinstall hook.
The observed network upload sends aggregated usage buckets; the code does not upload session text.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 40.2 KB of source, external domains: 127.0.0.1, burnboard.cc

Source & flagged code

6 flagged

install/burnboard-agent.mjsView file

Lines 1-60javascript

1import fs from "node:fs";

2import os from "node:os";

3import path from "node:path";

4import { spawnSync } from "node:child_process";

5import { DatabaseSync } from "node:sqlite";

High

Child Process

Package source references child process execution.

install/burnboard-agent.mjsView on unpkg · L3

6async function openSqlite(file) {

7 const database = new DatabaseSync(file, { readOnly: true });

8 return { all: (sql) => database.prepare(sql).all(), close: () => database.close() };

11const home = os.homedir();

12const root = path.join(home, ".burnboard");

13const dryRun = process.argv.includes("--dry-run");

14const jsonOutput = process.argv.includes("--json");

15const onlyTool = process.argv.find((argument) => argument.startsWith("--only="))?.slice(7);

16const config = dryRun ? null : JSON.parse(fs.readFileSync(path.join(root, "config.json"), "utf8").replace(/^\uFEFF/, ""));

17const buckets = new Map();

19function showNotification(title, message, destination) {

20 title = String(title || "BurnBoard").slice(0, 100);

21 message = String(message || "").slice(0, 200);

22 if (!message) return;

23 let notificationUrl;

24 try {

25 const candidate = new URL(destination);

26 if (candidate.protocol === "https:" || (candidate.protocol === "http:" && ["localhost","127.0.0.1"].includes(candidate.hostname))) notificationUrl = candidate.origin;

27 } catch {}

28 if (!notificationUrl) return;

29 if (process.platform === "win32") {

30 const script = `

31[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] > $null

32[Windows.Data.Xml.Dom.XmlDocument, Windows.Data.Xml.Dom.XmlDocument, ContentType = WindowsRuntime] > $null

33$title = [Security.SecurityElement]::Escape($env:BURNBOARD_NOTIFICATION_TITLE)

34$message = [Security.SecurityElement]::Escape($env:BURNBOARD_NOTIFICATION_MESSAGE)

35$url = [Security.SecurityElement]::Escape($env:BURNBOARD_NOTIFICATION_URL)

36$xml = New-Object Windows.Data.Xml.Dom.XmlDocument

37$xml.LoadXml("<toast activationType='protocol' launch='$url'><visual><binding template='ToastGeneric'><text>$title</text><text>$message</text></binding></visual></toast>")

38$toast = New-Object Windows.UI.Notifications.ToastNotification $xml

39[Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier('BurnBoard.Desktop').Show($toast)

40`;

41 spawnSync("powershell.exe", ["-NoLogo", "-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {

42 stdio:"ignore", env:{ ...process.env, BURNBOARD_NOTIFICATION_TITLE:title, BURNBOARD_NOTIFICATION_MESSAGE:message, BURNBOARD_NOTIFICATION_URL:notificationUrl },

High

Shell

Package source references shell execution.

install/burnboard-agent.mjsView on unpkg · L40

43 });

44 } else if (process.platform === "darwin") {

45 spawnSync("osascript", ["-e", "display notification (system attribute \"BURNBOARD_NOTIFICATION_MESSAGE\") with title (system attribute \"BURNBOARD_NOTIFICATION_TITLE\")"], {

46 stdio:"ignore", env:{ ...process.env, BURNBOARD_NOTIFICATION_TITLE:title, BURNBOARD_NOTIFICATION_MESSAGE:message },

47 });

48 } else {

49 spawnSync("notify-send", [title, message], { stdio:"ignore" });

50 }

51}

53function localDate(value) {

54 const parts = new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Kolkata", year: "numeric", month: "2-digit", day: "2-digit" }).formatToParts(new Date(value));

55 const get = (type) => parts.find((part) => part.type === type)?.value;

56 return `${get("year")}-${get("month")}-${get("day")}`;

57}

59function addUsage({ recordedAt, tool, model, input = 0, output = 0, cacheRead = 0, cacheCreation = 0 }) {

60 const values = [input, output, cacheRead, cacheCreation].map(Number);

cli.mjsView file

Lines 1-24javascript

1#!/usr/bin/env node

2import fs from "node:fs";

3import os from "node:os";

4import path from "node:path";

5import { spawn, spawnSync } from "node:child_process"

install/burnboard-register-notifications.ps1View file

•path = install/burnboard-register-notifications.ps1 kind = build_helper sizeBytes = 4418 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install/burnboard-register-notifications.ps1View on unpkg

Source & flagged code

6 flagged · loading source

install/burnboard-agent.mjsView file

3import path from "node:path"; L4: import { spawnSync } from "node:child_process"; L5: import { DatabaseSync } from "node:sqlite";

High

Child Process

Package source references child process execution.

install/burnboard-agent.mjsView on unpkg · L3

40`; L41: spawnSync("powershell.exe", ["-NoLogo", "-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], { L42: stdio:"ignore", env:{ ...process.env, BURNBOARD_NOTIFICATION_TITLE:title, BURNBOARD_NOTIFICATION_MESSAGE:message, BURNBOARD_NOTIFICATION_URL:notificationUrl },

High

Shell

Package source references shell execution.

install/burnboard-agent.mjsView on unpkg · L40

cli.mjsView file

4Source sends the broad process environment to a literal external destination. L4: import path from "node:path"; L5: import { spawn, spawnSync } from "node:child_process"; L6: import { randomUUID } from "node:crypto"; ... L12: const installRoot = path.join(packageRoot, "install"); L13: const burnboardRoot = path.join(os.homedir(), ".burnboard"); L14: const cliVersion = JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8")).version; L15: const installedVersionPath = path.join(burnboardRoot, "cli-version"); ... L21: const args = process.argv.slice(optionOnly ? 2 : 3); L22: const richTerminal = Boolean(process.stdout.isTTY && process.stdin.isTTY); L23: const brandColorEnabled = richTerminal && !process.env.NO_COLOR && process.env.TERM !== "dumb"; L24: const brandColor = (r

Findings

1 Critical4 High4 Medium5 Low

CriticalHardcoded Runtime Data Exfiltrationcli.mjs

HighChild Processinstall/burnboard-agent.mjs

HighShellinstall/burnboard-agent.mjs

HighSame File Env Network Executioncli.mjs

HighSandbox Evasion Gated Capabilitycli.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperinstall/burnboard-register-notifications.ps1

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to burnboard-cli@0.4.6.

See all versions of burnboard-cli for other recorded verdicts.

Review the evidence and your use of burnboard-cli@0.4.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-04 15:53:47.351Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.