registry / Data exfiltration / edgeone
edgeone
Command-line interface for TencentCloud Pages Functions
This report shows the evidence for edgeone@1.6.34. 2 of 22 known versions are blocked or flagged. The newest version, 1.6.44, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe launcher implements undisclosed collection and exfiltration of CLI and environment-derived data, including error stacks, to fixed logging endpoints. Although there is no install hook, the runtime behavior is a concrete data-exfiltration attack surface.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A user runs the edgeone command.
Impact
Account or project identifiers, platform details, command event data, and error stacks can leave the local machine without an evident consent control.
Mechanism
Hidden telemetry collection and network upload through the CLI launcher.
Attack narrative
The installed executable is a bundled launcher rather than a thin CLI shim. It spawns the main CLI with IPC, accepts event records from it, adds local network information and exit telemetry, and uploads the batch to hard-coded Tencent log-service endpoints. The child CLI supplies platform details, environment-derived identifiers, command events, and truncated error stacks. This collection occurs whenever the user runs the CLI and is not an API request needed to perform the requested command.
AI rationale
The launcher implements undisclosed collection and exfiltration of CLI and environment-derived data, including error stacks, to fixed logging endpoints. Although there is no install hook, the runtime behavior is a concrete data-exfiltration attack surface.
Evidence
edgeone-bin/edgeone.jsedgeone-dist/cli.js
Network endpoints2
ap-nanjing.cls.tencentcs.comap-singapore.cls.tencentcs.com
Decision evidence
public snapshotAI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest installs an executable that invokes an obfuscated bundled launcher.
- The launcher starts the CLI child process and forwards its IPC event records to hard-coded Tencent log endpoints.
- The CLI records environment-derived account or project identifiers and error stacks; the launcher uploads collected records on every CLI exit.
- The CLI serializes log key/value records and sends them through process IPC.
Evidence against
- There are no preinstall, install, or postinstall hooks in the manifest.
- The package exposes a CLI for TencentCloud Pages, so its service API calls alone are package-aligned.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
16 flagged · loading sourceedgeone-bin/edgeone.jsView file
7`)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=Object.keys(E.inspectOpts);for(let r=0...
L8: `).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,it)=>{typeof process>"u"||process.type=...
High
Child Process
Package source references child process execution.
edgeone-bin/edgeone.jsView on unpkg · L72var _a;
L3: var Un=Object.create;var jt=Object.defineProperty;var Bn=Object.getOwnPropertyDescriptor;var Dn=Object.getOwnPropertyNames;var Mn=Object.getPrototypeOf,jn=Object.prototype.hasOwnPr...
L4: `),function(u){if(o=u.indexOf(":"),n=et.trim(u.substr(0,o)).toLowerCase(),s=et.trim(u.substr(o+1)),n){if(r[n]&&Es.indexOf(n)>=0)return;n==="set-cookie"?r[n]=(r[n]?r[n]:[]).concat([...
L5: `).join(`
...
L7: `)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=Object.keys(E.inspectOpts);for(let r=0...
L8: `).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,it)=>{typeof process>"u"||process.type=...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
edgeone-bin/edgeone.jsView on unpkg · L2Findings
11 High8 Medium7 Low
HighChild Processedgeone-bin/edgeone.js
HighShell
HighSame File Env Network Executionedgeone-bin/edgeone.js
HighCommand Output Exfiltrationedgeone-bin/edgeone.js
HighCross File Remote Execution Contextedgeone-dist/pages/dev/runner-worker.js
HighSpawned Bundled Service Listeneredgeone-dist/pages/dev/runner-worker.js
HighTrigger Reachable Command Output Exfiltrationedgeone-bin/edgeone.js
HighShips High Entropy Bloblibs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whl
HighKnown Malware Source Similarityedgeone-bin/edgeone.js
HighKnown Malware Source Similarityedgeone-dist/pages/dev/runner-worker.js
HighKnown Malware Source Fingerprint Signature
Affected versions and remediation
This report applies to edgeone@1.6.34.
The versions list below shows the verdict for each recorded version.
- Avoid installing edgeone@1.6.34. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.