registry / create-newt-app / 0.31.8

create-newt-app@0.31.8

<div align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/zeevo/newt-app/main/.github/assets/logo-dark.svg"> <img src="https://raw.githubusercontent.com/zeevo/newt-app/main/.github/asse

AI Security Review

scanned 12d ago · by lpm-firewall-ai

The scanner’s credential exfiltration hint is not supported by the inspected source: the only outbound request is post-success product telemetry with a limited payload sent to the package’s own endpoint. The CLI manifest has no install hook, and the required dependency entry files expose ordinary prompt, styling, and command APIs.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user runs the CLI and scaffolding completes successfully.

Impact

The inspected payload contains no credentials, host identifiers, or project name, and the recipient is package-aligned.

Mechanism

The CLI posts its version, platform, CI category, selected options, and explicit flags; environment settings can disable the report.

AI rationale

Evidence

dist/index.js

Network endpoints1

newt-telemetry.newt-app.workers.dev

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes dist/index.js as the CLI and lists only build and development scripts; no install lifecycle hook is present.
After successful scaffolding, the CLI sends version, platform, CI category, flags, and project selections to the package’s Newt telemetry endpoint.
Telemetry can be disabled with environment settings, and the reviewed payload contains no credentials, host identifiers, or project name.
The inspected @clack/prompts entry files expose prompt functionality.
The inspected chalk entry files implement terminal styling.
The inspected commander entry files expose command-line parsing APIs.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 20 file(s), 452 KB of source, external domains: git-scm.com, github.com, help.github.com, json.schemastore.org, nestjs.com, newt-app.com, newt-telemetry.newt-app.workers.dev, nextjs.org, raw.githubusercontent.com, turborepo.dev, ui.shadcn.com, vercel.com, www.w3.org

Source & flagged code

5 flagged

dist/index.jsView file

7import { randomBytes } from "node:crypto"; L8: import { execa } from "execa"; L9: import ejs from "ejs"; ... L11: import path from "path"; L12: import https from "node:https"; L13: //#region package.json L14: var version = "0.31.8"; ... L197: <% } %>BETTER_AUTH_URL=http://localhost:3000 L198: BETTER_AUTH_SECRET=generate-with-openssl-rand-base64-32 L199: ` ... L339: // Load root .env first, then local .env (local takes precedence) L340: dotenv.config({ path: resolve(process.cwd(), '../../.env') });

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L7

7Trigger-reachable chain: manifest.bin -> dist/index.js L7: import { randomBytes } from "node:crypto"; L8: import { execa } from "execa"; L9: import ejs from "ejs"; ... L11: import path from "path"; L12: import https from "node:https"; L13: //#region package.json L14: var version = "0.31.8"; ... L197: <% } %>BETTER_AUTH_URL=http://localhost:3000 L198: BETTER_AUTH_SECRET=generate-with-openssl-rand-base64-32 L199: ` ... L339: // Load root .env first, then local .env (local takes precedence) L340: dotenv.config({ path: resolve(process.cwd(), '../../.env') });

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L7

Findings

2 Critical2 High3 Medium5 Low

CriticalCredential Exfiltrationdist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

HighTrigger Reachable Credential Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to create-newt-app@0.31.8.

See all versions of create-newt-app for other recorded verdicts.

Review the evidence and your use of create-newt-app@0.31.8 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-24 12:24:33.723Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / create-newt-app / 0.31.8

create-newt-app@0.31.8

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user runs the CLI and scaffolding completes successfully.

Impact

The inspected payload contains no credentials, host identifiers, or project name, and the recipient is package-aligned.

Mechanism

The CLI posts its version, platform, CI category, selected options, and explicit flags; environment settings can disable the report.

AI rationale

Evidence

dist/index.js

Network endpoints1

newt-telemetry.newt-app.workers.dev

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes dist/index.js as the CLI and lists only build and development scripts; no install lifecycle hook is present.
After successful scaffolding, the CLI sends version, platform, CI category, flags, and project selections to the package’s Newt telemetry endpoint.
Telemetry can be disabled with environment settings, and the reviewed payload contains no credentials, host identifiers, or project name.
The inspected @clack/prompts entry files expose prompt functionality.
The inspected chalk entry files implement terminal styling.
The inspected commander entry files expose command-line parsing APIs.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

5 flagged

dist/index.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L7

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L7

Findings

2 Critical2 High3 Medium5 Low

CriticalCredential Exfiltrationdist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

HighTrigger Reachable Credential Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to create-newt-app@0.31.8.

See all versions of create-newt-app for other recorded verdicts.

Review the evidence and your use of create-newt-app@0.31.8 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-24 12:24:33.723Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.