cyrus-ai@0.2.71
AI-powered Linear issue automation using Claude
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
2 flaggeddist/src/commands/SelfAuthCommand.jsView file
13server = null;
L14: callbackPort = parseInt(process.env.CYRUS_SERVER_PORT || "3456", 10);
L15: async execute(_args) {
...
L32: console.log(" LINEAR_CLIENT_SECRET=your-client-secret");
L33: console.log(" CYRUS_BASE_URL=https://your-tunnel-domain.com");
L34: process.exit(1);
...
L39: try {
L40: config = migrateEdgeConfig(JSON.parse(readFileSync(configPath, "utf-8")));
L41: }
...
L120: .code(400)
L121: .send(`<!DOCTYPE html>
L122: <html><head><meta charset="utf-8"></head>
High
Credential Exfiltration
Source combines credential-like environment material and outbound requests; review data flow before blocking.
dist/src/commands/SelfAuthCommand.jsView on unpkg · L1313Trigger-reachable credential exfiltration chain: scripts.start -> dist/src/app.js -> [redacted].js
L13: server = null;
L14: callbackPort = parseInt(process.env.CYRUS_SERVER_PORT || "3456", 10);
L15: async execute(_args) {
...
L32: console.log(" LINEAR_CLIENT_SECRET=your-client-secret");
L33: console.log(" CYRUS_BASE_URL=https://your-tunnel-domain.com");
L34: process.exit(1);
...
L39: try {
L40: config = migrateEdgeConfig(JSON.parse(readFileSync(configPath, "utf-8")));
L41: }
...
L120: .code(400)
L121: .send(`<!DOCTYPE html>
L122: <html><head><meta charset="utf-8"></head>
High
Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/src/commands/SelfAuthCommand.jsFindings
2 High2 Medium4 Low
HighCredential Exfiltrationdist/src/commands/SelfAuthCommand.js
HighTrigger Reachable Credential Exfiltrationdist/src/commands/SelfAuthCommand.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to cyrus-ai@0.2.71.
See all versions of cyrus-ai for other recorded verdicts.
- Review the evidence and your use of cyrus-ai@0.2.71 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.