indiecorns@0.4.2
Indiecorns CLI and agent plugin for account sign-in, onboarding tasks, and local setup checks.
AI Security Review
scanned 3d ago · by lpm-firewall-aiMark this version suspicious because default runtime telemetry sends signed-in users' email and account-linked command activity to PostHog. The behavior is disclosed and can be disabled, but the email is identifying information beyond ordinary anonymous telemetry.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI starts an ordinary command while telemetry is enabled, which is the default.
Impact
PostHog receives the signed-in user's email and account-linked CLI activity; users can disable telemetry.
Mechanism
It identifies the signed-in user with PostHog using session email and account properties, and sends command telemetry to eu.i.posthog.com by default.
AI rationale
Mark this version suspicious because default runtime telemetry sends signed-in users' email and account-linked command activity to PostHog. The behavior is disclosed and can be disabled, but the email is identifying information beyond ordinary anonymous telemetry.
Evidence
indiecorns/bin/indiecorns.mjsREADME.md~/.indiecorns/config.json
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- When a browser session is configured, telemetry identity properties include the user's email and Indiecorns account ID.
- The CLI identifies that user with PostHog; the default host is eu.i.posthog.com.
- Telemetry is started for ordinary CLI commands by default, unless disabled by a flag, environment setting, or config.
- The README discloses product telemetry and that it identifies signed-in users.
Evidence against
- The package describes itself as an Indiecorns onboarding CLI and agent plugin, and declares no install lifecycle scripts.
- Slack credentials are used with Slack's own API; the flagged persistence is performed only by the explicit worker install action.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggedindiecorns/lib/service.mjsView file
3Trigger-reachable persistence chain: manifest.bin -> indiecorns/bin/indiecorns.mjs -> indiecorns/lib/service.mjs
L3: import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="htt
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
indiecorns/lib/service.mjsView on unpkg · L33import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
L47: <RegistrationInfo><Description>Indiecorns community wor
Findings
3 High4 Medium5 Low
HighCopied Package Dependency Bridgeindiecorns/bin/indiecorns.mjs
HighTrigger Reachable Persistenceindiecorns/lib/service.mjs
HighPrevious Version Dangerous Deltaindiecorns/bin/indiecorns.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceindiecorns/lib/service.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to indiecorns@0.4.2.
See all versions of indiecorns for other recorded verdicts.
- Review the evidence and your use of indiecorns@0.4.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.