codebolt@1.12.85
CodeBolt headless server CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe source configures default-on runtime telemetry during CLI server startup, while the telemetry payload and disclosure are not established by the inspected excerpts. This supports a warning for telemetry, not a malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Starting the CLI server; the CLI is the package’s default action.
Impact
Undisclosed runtime telemetry creates a privacy risk; the inspected excerpts do not establish whether logs include identifying details.
Mechanism
Server startup initializes the categorized logger with Cloudflare export enabled and PostHog enabled unless CODEBOLT_DISABLE_TELEMETRY is set.
AI rationale
The source configures default-on runtime telemetry during CLI server startup, while the telemetry payload and disclosure are not established by the inspected excerpts. This supports a warning for telemetry, not a malicious verdict.
Evidence
dist/index.js
Network endpoints2
codebolt-log-ingest.arrowai.workers.devPostHog host (not explicit in the server configuration)
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Starting the CLI server initializes logging with Cloudflare export enabled to https://codebolt-log-ingest.arrowai.workers.dev; PostHog is also enabled unless CODEBOLT_DISABLE_TELEMETRY is set.
- The entry point invokes the server as the CLI’s default action, so this telemetry starts during ordinary server startup.
- The logger’s exported payload was not established from the inspected source, so the privacy risk is uncertain.
Evidence against
- The manifest identifies the package as a headless server CLI and names its CLI entry point.
- The only lifecycle hook is prepublishOnly, which runs the package build; there is no install hook.
- The flagged GitHub credential flow is a user-facing token-scope request that sends the token to GitHub’s API.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinified
Source & flagged code
7 flaggeddist/web/assets/serverWorkerMain-CPdrTHxh.jsView file
2patternName = generic_password
severity = medium
line = 2
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/web/assets/serverWorkerMain-CPdrTHxh.jsView on unpkg · L21/*! For license information please see serverWorkerMain.js.LICENSE.txt */
L2: var serverExportVar;(()=>{var e={3608:(e,t,r)=>{"use strict";var n;function i(e){if("contents"in e)n="string"==typeof e.contents?JSON.parse(e.contents):e.contents;else if("fsPath"i...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/web/assets/serverWorkerMain-CPdrTHxh.jsView on unpkg · L1dist/web/assets/iconv-lite-umd-DpoLQuPU.jsView file
7contains invisible/control Unicode U+200B (zero width space)
\v\f\r\x1B !"#$٪&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~°·∙√▒─│┼┤┬├┴┐┌└┘β∞φ±½¼≈«»ﻷﻸ��ﻻﻼ� ﺂ£¤ﺄ��ﺎﺏﺕﺙ،ﺝﺡﺥ٠١٢٣٤٥٦٧٨٩ﻑ؛ﺱﺵﺹ؟¢ﺀﺁﺃﺅﻊﺋﺍﺑﺓﺗﺛﺟﺣﺧﺩﺫﺭﺯﺳﺷﺻﺿﻁﻅﻋﻏ¦¬÷×ﻉـﻓﻗﻛﻟﻣﻧﻫﻭﻯﻳﺽﻌﻎﻍﻡﹽّﻥ
Findings
1 Critical2 High7 Medium8 Low
CriticalTrojan Source Unicodedist/web/assets/iconv-lite-umd-DpoLQuPU.js
HighCross File Remote Execution Contextdist/web/assets/htmlServerMain-BEIBCfWH.js
HighSemantic Analysis Limiteddist/web/assets/MonacoTabsEditor-DEkHOQ1j.js
MediumSecret Patterndist/web/assets/serverWorkerMain-CPdrTHxh.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/web/assets/onig-Du5pRr7Y.wasm
MediumOversized Source Filedist/web/assets/vendor-monaco-7uIto7rp.js
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
Affected versions and remediation
This report applies to codebolt@1.12.85.
See all versions of codebolt for other recorded verdicts.
- Review the evidence and your use of codebolt@1.12.85 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.