edgeone@1.6.40
Command-line interface for TencentCloud Pages Functions
AI Security Review
scanned 1mo ago · by lpm-firewall-aiNo install-time malicious chain was found. However, command-triggered telemetry transmits local and IPC-derived data, and the shipped wheel prevents a decisive clean verdict.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A user runs the edgeone command.
Impact
CLI, platform, local-network, and application/project metadata may be disclosed; IPC values broaden the possible payload beyond fixed metrics.
Mechanism
CLI telemetry collector uploads IPC-provided event records to Tencent Cloud CLS.
AI rationale
No install-time malicious chain was found. However, command-triggered telemetry transmits local and IPC-derived data, and the shipped wheel prevents a decisive clean verdict.
Evidence
edgeone-bin/edgeone.jsedgeone-dist/pages/dev/runner-worker.jsedgeone-dist/cli.js
Network endpoints2
ap-nanjing.cls.tencentcs.comap-singapore.cls.tencentcs.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The published CLI configures Tencent Cloud log endpoints and uploads accumulated records.
- The CLI forwards child-process IPC values into its telemetry queue, so its transmitted payload can include command-provided event data.
- The developer runner emits environment-derived application and project identifiers through IPC.
- A shipped Python wheel is a binary archive, preventing complete source-level validation of that high-risk artifact.
Evidence against
- package.json has no preinstall, install, or postinstall hook; its lifecycle hook is publish-only.
- The observed network behavior is activated by running the edgeone command, not by package installation.
- Inspected telemetry fields are primarily CLI and platform metadata; no direct credential-file harvesting was confirmed.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
13 flagged · loading sourceedgeone-bin/edgeone.jsView file
7`)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=Object.keys(E.inspectOpts);for(let r=0...
L8: `).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,it)=>{typeof process>"u"||process.type=...
High
Child Process
Package source references child process execution.
edgeone-bin/edgeone.jsView on unpkg · L72var _a;
L3: var Un=Object.create;var jt=Object.defineProperty;var Bn=Object.getOwnPropertyDescriptor;var Dn=Object.getOwnPropertyNames;var Mn=Object.getPrototypeOf,jn=Object.prototype.hasOwnPr...
L4: `),function(u){if(o=u.indexOf(":"),n=et.trim(u.substr(0,o)).toLowerCase(),s=et.trim(u.substr(o+1)),n){if(r[n]&&Es.indexOf(n)>=0)return;n==="set-cookie"?r[n]=(r[n]?r[n]:[]).concat([...
L5: `).join(`
...
L7: `)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=Object.keys(E.inspectOpts);for(let r=0...
L8: `).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,it)=>{typeof process>"u"||process.type=...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
edgeone-bin/edgeone.jsView on unpkg · L2Findings
7 High8 Medium7 Low
HighChild Processedgeone-bin/edgeone.js
HighSame File Env Network Executionedgeone-bin/edgeone.js
HighCommand Output Exfiltrationedgeone-bin/edgeone.js
HighTrigger Reachable Command Output Exfiltrationedgeone-bin/edgeone.js
HighShips High Entropy Bloblibs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whl
HighKnown Malware Source Similarityedgeone-bin/edgeone.js
HighKnown Malware Source Similarityedgeone-dist/pages/dev/runner-worker.js
MediumDynamic Requireedgeone-bin/edgeone.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperedgeone-dist/pages/observability-python/bootstrap.py
Medium
Affected versions and remediation
This report applies to edgeone@1.6.40.
See all versions of edgeone for other recorded verdicts.
- Review the evidence and your use of edgeone@1.6.40 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.