postboi@0.39.0
<div align="center"> <img src="https://raw.githubusercontent.com/postboi-mail/postboi/refs/heads/main/static/logo.svg" alt="Postboi" width="250" />
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not concrete malware, but its explicit setup path installs a prepare hook and handles credential synchronization. Per policy, retain a warn verdict for this dangerous lifecycle capability.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs postboi init, sync, or env push.
Impact
Later project prepares can run postboi sync; selected credentials may be sent to the user's Postboi account.
Mechanism
authenticated credential sync and project lifecycle configuration
AI rationale
This is not concrete malware, but its explicit setup path installs a prepare hook and handles credential synchronization. Per policy, retain a warn verdict for this dangerous lifecycle capability.
Evidence
package.jsondist/cli.jsdist/workers_env.js.env.env.local.gitignorepostboi.config.ts
Network endpoints1
postboi.app/v1/env
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- CLI can add `postboi sync` to the invoking project's prepare lifecycle.
- CLI uploads selected credential values to Postboi's authenticated /v1/env endpoint.
Evidence against
- No preinstall, install, or postinstall hook is declared.
- The lifecycle mutation is in a user-invoked CLI setup path, not package installation.
- Credential syncing requires POSTBOI_TOKEN and is presented as team syncing.
- Dynamic Cloudflare import is guarded to the Cloudflare Workers runtime.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/cli.jsView file
47// src/library/encoding.ts
L48: function base64_decode(value) {
L49: const binary = atob(value);
...
L131: const { pathToFileURL } = await import("node:url");
L132: let dir = process.cwd();
L133: for (;; ) {
...
L268: if (this.#hooks.before?.send) {
L269: return this.#hooks.before.send({
L270: provider: this.provider,
...
L317: async send_request(url, init) {
L318: return fetch(url, init);
L319: }
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli.jsView on unpkg · L4747// src/library/encoding.ts
L48: function base64_decode(value) {
L49: const binary = atob(value);
...
L131: const { pathToFileURL } = await import("node:url");
L132: let dir = process.cwd();
L133: for (;; ) {
...
L268: if (this.#hooks.before?.send) {
L269: return this.#hooks.before.send({
L270: provider: this.provider,
...
L317: async send_request(url, init) {
L318: return fetch(url, init);
L319: }
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
dist/cli.jsView on unpkg · L47•matchType = previous_version_dangerous_delta
matchedPackage = postboi@0.37.1
matchedIdentity = npm:cG9zdGJvaQ:0.37.1
similarity = 0.974
summary = stored previous version shares package body but lacks this dangerous source file
Findings
3 Critical3 High4 Medium5 Low
CriticalCredential Exfiltrationdist/cli.js
CriticalBrowser Credential Phishingdist/cli.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighCommand Output Exfiltrationdist/cli.js
MediumDynamic Requiredist/workers_env.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to postboi@0.39.0.
See all versions of postboi for other recorded verdicts.
- Review the evidence and your use of postboi@0.39.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.