postboi@0.69.0
Postboi is an email provider and TypeScript SDK. Send email with one token and no DNS setup, plus SMS, WhatsApp, push and chat from the same API. You can also use your own provider (Resend, SES, Postmark and more) if you want to.
AI Security Review
scanned 20d ago · by lpm-firewall-aiSource inspection resolved the credential-transfer hint as Turnstile verification to Cloudflare and the agent-configuration hint as CLI setup behavior. The prepare hook only runs Svelte synchronization, so the inspected evidence supports a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The install hook runs package synchronization; agent skill setup is reached through the CLI init command, and captcha verification runs during form submission.
Impact
The inspected behavior supports package setup and intended captcha verification; it does not establish credential theft or an attack on agent configuration.
Mechanism
The CLI installs or refreshes package-provided skill files during setup, prompting when the target is missing. Captcha verification sends its token and secret to Cloudflare’s fixed verification endpoint.
AI rationale
Source inspection resolved the credential-transfer hint as Turnstile verification to Cloudflare and the agent-configuration hint as CLI setup behavior. The prepare hook only runs Svelte synchronization, so the inspected evidence supports a clean verdict.
Evidence
package.jsondist/cli.jsdist/captcha.jsdist/index.js
Network endpoints1
challenges.cloudflare.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The prepare hook runs Svelte synchronization, and the manifest exposes the CLI as a command.
- Agent skill setup runs through the explicit init command; a missing skill prompts for installation, and an existing skill is refreshed during that setup.
- Captcha verification sends the configured Turnstile secret and response token to Cloudflare’s fixed site verification endpoint.
- The form API invokes captcha verification as part of form submission.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/cli.jsView file
51// src/library/encoding.ts
L52: function base64_decode(value) {
L53: const binary = atob(value);
...
L135: const { pathToFileURL } = await import("node:url");
L136: let dir = process.cwd();
L137: for (;; ) {
...
L322: if (this.#hooks.before?.send) {
L323: return this.#hooks.before.send({
L324: provider: this.provider,
...
L374: async send_request(url, init) {
L375: return fetch(url, init);
L376: }
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli.jsView on unpkg · L5151// src/library/encoding.ts
L52: function base64_decode(value) {
L53: const binary = atob(value);
...
L135: const { pathToFileURL } = await import("node:url");
L136: let dir = process.cwd();
L137: for (;; ) {
...
L322: if (this.#hooks.before?.send) {
L323: return this.#hooks.before.send({
L324: provider: this.provider,
...
L374: async send_request(url, init) {
L375: return fetch(url, init);
L376: }
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
dist/cli.jsView on unpkg · L51•matchType = previous_version_dangerous_delta
matchedPackage = postboi@0.68.1
matchedIdentity = npm:cG9zdGJvaQ:0.68.1
similarity = 0.767
summary = stored previous version shares package body but lacks this dangerous source file
Findings
3 Critical3 High4 Medium5 Low
CriticalCredential Exfiltrationdist/cli.js
CriticalBrowser Credential Phishingdist/cli.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighCommand Output Exfiltrationdist/cli.js
MediumDynamic Requiredist/workers_env.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to postboi@0.69.0.
See all versions of postboi for other recorded verdicts.
- Review the evidence and your use of postboi@0.69.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.