postboi@0.31.0
<div align="center"> <img src="https://raw.githubusercontent.com/postboi-mail/postboi/refs/heads/main/static/logo.svg" alt="Postboi" width="250" />
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is not an npm lifecycle malware chain, but the CLI automatically uploads third-party credentials collected during BYO setup. Warn rather than block because activation requires explicit user CLI commands and the behavior is presented as team credential synchronization.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs `postboi init` and selects/configures a provider, or runs `postboi env push`.
Impact
Third-party API keys and messaging credentials may be disclosed to the Postboi service and later pulled into project env files.
Mechanism
Collects project/provider secrets and sends them to a Postboi API credential store.
AI rationale
This is not an npm lifecycle malware chain, but the CLI automatically uploads third-party credentials collected during BYO setup. Warn rather than block because activation requires explicit user CLI commands and the behavior is presented as team credential synchronization.
Evidence
package.jsondist/cli.js.env.env.local.envrc.dev.vars.gitignorepostboi.config.tspostboi.config.mtspostboi.config.jspostboi.config.mjs
Network endpoints1
postboi.app/v1/env
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI collects provider fields marked secret, then automatically calls credential synchronization during setup.
- Credential synchronization PUTs the collected variables to the Postboi API endpoint.
- `postboi env push` reads recognized credentials from project env files and uploads them.
- The package advertises that `postboi init` pushes credentials as it collects them.
Evidence against
- The manifest's only lifecycle hook runs `svelte-kit sync`; it does not invoke the CLI.
- Credential collection/upload is reached through explicit CLI `init` or `env` commands, not import-time execution.
- No hidden shell payload, browser credential-store harvesting, or install-time network execution was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
6 flaggeddist/cli.jsView file
108const { pathToFileURL } = await import("node:url");
L109: let dir = process.cwd();
L110: for (;; ) {
...
L245: if (this.#hooks.before?.send) {
L246: return this.#hooks.before.send({
L247: provider: this.provider,
...
L294: async send_request(url, init) {
L295: return fetch(url, init);
L296: }
...
L358: async read_json(response) {
L359: const text = await response.text();
L360: if (!text)
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli.jsView on unpkg · L108108const { pathToFileURL } = await import("node:url");
L109: let dir = process.cwd();
L110: for (;; ) {
...
L245: if (this.#hooks.before?.send) {
L246: return this.#hooks.before.send({
L247: provider: this.provider,
...
L294: async send_request(url, init) {
L295: return fetch(url, init);
L296: }
...
L358: async read_json(response) {
L359: const text = await response.text();
L360: if (!text)
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
dist/cli.jsView on unpkg · L108781import { readdirSync as readdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync4, existsSync as existsSync3, appendFileSync } from "node:fs";
L782: import { spawnSync } from "node:child_process";
L783: import { join as join5, delimiter } from "node:path";
Findings
2 Critical3 High4 Medium6 Low
CriticalCredential Exfiltrationdist/cli.js
CriticalBrowser Credential Phishingdist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighCommand Output Exfiltrationdist/cli.js
MediumDynamic Requiredist/workers_env.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to postboi@0.31.0.
See all versions of postboi for other recorded verdicts.
- Review the evidence and your use of postboi@0.31.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.