ft-scout@8.0.7
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis release has no install lifecycle hook or confirmed automatic exfiltration, but its dashboard server creates a concrete unauthenticated command-injection and auth-disclosure surface. The source supports a security downgrade rather than a malware block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the dashboard CLI command, then an attacker reaches the local dashboard service or causes a browser to send it requests.
Impact
Arbitrary commands can run in the consumer project context, and session data can be disclosed.
Mechanism
Wildcard-CORS unauthenticated API combined with shell command injection.
AI rationale
This release has no install lifecycle hook or confirmed automatic exfiltration, but its dashboard server creates a concrete unauthenticated command-injection and auth-disclosure surface. The source supports a security downgrade rather than a malware block.
Evidence
bin/src/server/server.jspackage.jsonbin/ft.jsconsumer project working directory~/.ft/auth.json
Network endpoints1
localhost:9120
Decision evidence
public snapshotAI called this Suspicious at 98.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- The dashboard server accepts requests from every web origin and has no authentication on sensitive API routes.
- Its status API returns the complete loaded authentication object, including stored session fields.
- Its dashboard command endpoint inserts a request-controlled command into a shell command and executes it with child_process.exec.
- The package exposes its CLI through bin/ft.js, making the dashboard functionality reachable to package users.
Evidence against
- package.json contains no preinstall, install, or postinstall lifecycle hook.
- The SMTP code sends a welcome message only after the explicit signup flow and addresses the supplied signup email.
- No source evidence shows automatic secret exfiltration or execution during installation.
- The opaque gzip archive could not be safely source-cited, so it is not treated as proof of malicious behavior.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
17 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
3 Critical11 High5 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/commands/plan.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighRemote Agent Bridgebin/src/engine/agentEngine.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/server/server.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
Affected versions and remediation
This report applies to ft-scout@8.0.7.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@8.0.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.