edgeone@1.6.44
Command-line interface for TencentCloud Pages Functions
AI Security Review
scanned 3d ago · by lpm-firewall-aiSource inspection confirms automatic CLI telemetry, but the wrapper and event handling support operational reporting to Tencent CLS, and command metadata filters credential-like arguments. The scanner's command-output exfiltration label is not established by the inspected source; no malicious attack behavior was confirmed.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Running the edgeone CLI; the wrapper reports logs when its child process exits.
Impact
This is package-aligned operational telemetry, but diagnostic text may include runtime details. The inspected source does not establish command-output theft or another concrete attack.
Mechanism
The wrapper packages logs and CLI events for the Tencent CLS client. Command metadata filters credentials into presence flags and reduces path values to categories, while error messages and stacks are transmitted in truncated form.
AI rationale
Source inspection confirms automatic CLI telemetry, but the wrapper and event handling support operational reporting to Tencent CLS, and command metadata filters credential-like arguments. The scanner's command-output exfiltration label is not established by the inspected source; no malicious attack behavior was confirmed.
Network endpoints2
ap-nanjing.cls.tencentcs.comap-singapore.cls.tencentcs.com
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json defines the executable as edgeone-bin/edgeone.js and its lifecycle scripts are build and publish-asset checks, not consumer install hooks.
- The wrapper starts the CLI child and sends buffered structured logs to Tencent CLS when the process exits.
- CLI telemetry records command metadata and filters credential-like arguments into presence flags; path-like values are reduced to path kinds.
- The shipped Python wheel analysis identifies a pages-blob storage SDK; the flagged studio asset is a frontend bundle and the runner worker is bundled runtime code.
Evidence against
- The wrapper automatically reports CLI exit and error events with the machine's local IP to Tencent CLS; source does not show an opt-in gate.
- CLI error telemetry includes truncated error messages and stacks, so some runtime diagnostic text may be transmitted.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
13 flagged · loading sourceedgeone-bin/edgeone.jsView file
7`)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=Object.keys(E.inspectOpts);for(let r=0...
L8: `).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,it)=>{typeof process>"u"||process.type=...
High
Child Process
Package source references child process execution.
edgeone-bin/edgeone.jsView on unpkg · L72var _a;
L3: var Un=Object.create;var jt=Object.defineProperty;var Bn=Object.getOwnPropertyDescriptor;var Dn=Object.getOwnPropertyNames;var Mn=Object.getPrototypeOf,jn=Object.prototype.hasOwnPr...
L4: `),function(u){if(o=u.indexOf(":"),n=et.trim(u.substr(0,o)).toLowerCase(),s=et.trim(u.substr(o+1)),n){if(r[n]&&Es.indexOf(n)>=0)return;n==="set-cookie"?r[n]=(r[n]?r[n]:[]).concat([...
L5: `).join(`
...
L7: `)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=Object.keys(E.inspectOpts);for(let r=0...
L8: `).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,it)=>{typeof process>"u"||process.type=...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
edgeone-bin/edgeone.jsView on unpkg · L2Findings
7 High8 Medium7 Low
HighChild Processedgeone-bin/edgeone.js
HighSame File Env Network Executionedgeone-bin/edgeone.js
HighCommand Output Exfiltrationedgeone-bin/edgeone.js
HighTrigger Reachable Command Output Exfiltrationedgeone-bin/edgeone.js
HighShips High Entropy Bloblibs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whl
HighKnown Malware Source Similarityedgeone-bin/edgeone.js
HighKnown Malware Source Similarityedgeone-dist/pages/dev/runner-worker.js
MediumDynamic Requireedgeone-bin/edgeone.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperedgeone-dist/pages/observability-python/bootstrap.py
Medium
Affected versions and remediation
This report applies to edgeone@1.6.44.
See all versions of edgeone for other recorded verdicts.
- Review the evidence and your use of edgeone@1.6.44 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.