create-zuplo-api@7.9.4
Create Zuplo API with one command
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource supports a warning for conditional forwarding of an existing service credential to an unrestricted configured endpoint, plus guarded agent configuration capability. No automatic install attack or concrete malware behavior was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Run the project-creation CLI with server-project setup enabled and an overridden developer API endpoint, or select agent configuration.
Impact
An operator-configured endpoint could receive the existing Zuplo token. Agent consent enables subsequent plugin loading through the configured marketplace, but this source does not establish automatic plugin updates.
Mechanism
The CLI loads the stored token and sends bearer-authenticated requests to the configured endpoint. Agent selection writes project configuration enabling Zuplo plugins and documentation tools.
AI rationale
Source supports a warning for conditional forwarding of an existing service credential to an unrestricted configured endpoint, plus guarded agent configuration capability. No automatic install attack or concrete malware behavior was identified.
Evidence
dist/index.js.local/state/zuplo/auth.json.mcp.json.claude/settings.jsonCLAUDE.md
Network endpoints3
dev.zuplo.comdev.zuplo.com/mcp/docscodeload.github.com/zuplo/tools/tar.gz/main
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The CLI reads an existing Zuplo access token from the user's Zuplo authentication file.
- The developer API destination accepts ZUPLO_DEVELOPER_API_ENDPOINT without an allowlist, and account requests send the saved token as bearer authentication.
- Server-project creation activates token discovery and account requests; this follows a CLI flag or interactive setup choice.
- Agent setup requires an explicit selection and defaults to no agents in non-interactive mode.
- Selected agent setup writes project instructions, MCP configuration and Claude settings enabling Zuplo marketplace plugins.
Evidence against
- The manifest has no install lifecycle hooks or runtime self-dependency.
- The default authentication destination is Zuplo's developer API; no covert unrelated recipient was identified.
- Project installation commands and analytics match the scaffolding workflow; analytics sends selected options and runtime metadata.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEval
Source & flagged code
8 flaggeddist/index.jsView file
1#!/usr/bin/env node
L2: (()=>{var t={7213:(t,u,p)=>{"use strict";Object.defineProperty(u,"__esModule",{value:true});u.createFileSystemAdapter=u.FILE_SYSTEM_ADAPTER=void 0;const m=p(9896);u.FILE_SYSTEM_ADA...
L3: || (${w} == "string" && ${g} && ${g} == +${g})`).assign(E,(0,b._)`+${g}`);return;case"integer":m.elseIf((0,b._)`${w} === "boolean" || ${g} === null
L4: || (${w} === "string" && ${g} && ${g} == +${g} && !(${g} % 1))`).assign(E,(0,b._)`+${g}`);return;case"boolean":m.elseIf((0,b._)`${g} === "false" || ${g} === 0 || ${g} === null`).as...
L5: || ${w} === "boolean" || ${g} === null`).assign(E,(0,b._)`[${g}]`)}}}function assignParentData({gen:t,parentData:u,parentDataProperty:p},m){t.if((0,b._)`${u} !== undefined`,(()=>t....
L6: missingProperty: ${g},
L7: depsCount: ${u},
L8: deps: ${
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L11Trigger-reachable chain: manifest.bin -> dist/index.js
L1: #!/usr/bin/env node
L2: (()=>{var t={7213:(t,u,p)=>{"use strict";Object.defineProperty(u,"__esModule",{value:true});u.createFileSystemAdapter=u.FILE_SYSTEM_ADAPTER=void 0;const m=p(9896);u.FILE_SYSTEM_ADA...
L3: || (${w} == "string" && ${g} && ${g} == +${g})`).assign(E,(0,b._)`+${g}`);return;case"integer":m.elseIf((0,b._)`${w} === "boolean" || ${g} === null
L4: || (${w} === "string" && ${g} && ${g} == +${g} && !(${g} % 1))`).assign(E,(0,b._)`+${g}`);return;case"boolean":m.elseIf((0,b._)`${g} === "false" || ${g} === 0 || ${g} === null`).as...
L5: || ${w} === "boolean" || ${g} === null`).assign(E,(0,b._)`[${g}]`)}}}function assignParentData({gen:t,parentData:u,parentDataProperty:p},m){t.if((0,b._)`${u} !== undefined`,(()=>t....
L6: m
Findings
2 Critical6 High3 Medium4 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighEvaldist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Low
Affected versions and remediation
This report applies to create-zuplo-api@7.9.4.
See all versions of create-zuplo-api for other recorded verdicts.
- Review the evidence and your use of create-zuplo-api@7.9.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.