postboi@0.76.1
Postboi is an email provider and TypeScript SDK. Send email with one token and no DNS setup, plus SMS, WhatsApp, push and chat from the same API. You can also use your own provider (Resend, SES, Postmark and more) if you want to.
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe manifest’s prepare hook only runs Svelte synchronization. Inspected credential flows use service-specific credentials with their corresponding service APIs, and the CLI password match is a disabled demo field; the scanner hints do not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user invokes the inbox screenshot feature or Microsoft 365 polling.
Impact
No unrelated credential export or other concrete attack impact was established.
Mechanism
The inbox sends its Postboi token to the configured Postboi API for a recorded screenshot run. The poller uses configured Microsoft credentials to request a Microsoft Graph token and query message traces.
AI rationale
The manifest’s prepare hook only runs Svelte synchronization. Inspected credential flows use service-specific credentials with their corresponding service APIs, and the CLI password match is a disabled demo field; the scanner hints do not establish malicious behavior.
Evidence
package.jsondist/inbox_server.jsdist/webhooks/poll_microsoft365.jsdist/cli.jsdist/inbox_art.jsdist/webhooks/poll_cloudflare.jsdist/webhooks/poll_twilio.jsdist/views.jsdist/webhooks/vonage.js
Network endpoints4
postboi.applogin.microsoftonline.comgraph.microsoft.comapi.cloudflare.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json’s prepare script runs Svelte synchronization, and the CLI is distributed as an explicit command-line entry point.
- The inbox screenshot route requires a locally recorded run and a Postboi token, then sends that token to the configured Postboi API; the default host is postboi.app.
- Microsoft 365 polling obtains a token using configured tenant credentials and sends it to Microsoft Graph to retrieve message traces.
- The CLI password field is disabled and contains a fixed demo value; it is not an active credential collection form.
- The other inspected files implement provider polling or webhook normalization, local view-key handling, and embedded artwork.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
10 flaggeddist/cli.jsView file
69class: "Resend",
L70: url: "https://resend.com/api-keys",
L71: fields: [
...
L439: {
L440: env: "MJ_APIKEY_PRIVATE",
L441: arg: "api_secret",
...
L614: {
L615: env: "GMAIL_PRIVATE_KEY",
L616: arg: "private_key",
...
L1509: // src/library/encoding.ts
L1510: function base64_decode(value) {
L1511: const binary = atob(value);
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli.jsView on unpkg · L6969class: "Resend",
L70: url: "https://resend.com/api-keys",
L71: fields: [
...
L439: {
L440: env: "MJ_APIKEY_PRIVATE",
L441: arg: "api_secret",
...
L614: {
L615: env: "GMAIL_PRIVATE_KEY",
L616: arg: "private_key",
...
L1509: // src/library/encoding.ts
L1510: function base64_decode(value) {
L1511: const binary = atob(value);
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
dist/cli.jsView on unpkg · L695656} from "node:fs";
L5657: import { spawnSync } from "node:child_process";
L5658: import { join as join12, delimiter, dirname as dirname7 } from "node:path";
High
Child Process
Package source references child process execution.
Findings
2 Critical7 High4 Medium5 Low
CriticalCredential Exfiltrationdist/cli.js
CriticalBrowser Credential Phishingdist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighKnown Malware Source Similaritydist/cli.js
HighKnown Malware Source Similaritydist/inbox_server.js
HighKnown Malware Source Similaritydist/views.js
HighKnown Malware Source Similaritydist/webhooks/vonage.js
MediumDynamic Requiredist/workers_env.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to postboi@0.76.1.
See all versions of postboi for other recorded verdicts.
- Review the evidence and your use of postboi@0.76.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.