postboi@0.77.0
Postboi is an email provider and TypeScript SDK. Send email with one token and no DNS setup, plus SMS, WhatsApp, push and chat from the same API. You can also use your own provider (Resend, SES, Postmark and more) if you want to.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe suspicious scanner leads resolve to expected provider authentication and product features. The CLI syncs credentials only during an explicit setup flow with a Postboi account token, and describes the action as team credential sync; no unrelated credential collection or exfiltration was identified.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Network requests occur when users invoke provider or inbox features; team credential sync is part of the explicit CLI init flow when signed into Postboi.
Impact
Expected provider operations and account credential sync; no unrelated collection or concealed credential transfer was identified.
Mechanism
Provider credentials go to their configured providers; the CLI's documented team-sync flow sends entered credentials to the configured Postboi account.
AI rationale
The suspicious scanner leads resolve to expected provider authentication and product features. The CLI syncs credentials only during an explicit setup flow with a Postboi account token, and describes the action as team credential sync; no unrelated credential collection or exfiltration was identified.
Evidence
.env files selected during CLI setup
Network endpoints3
login.microsoftonline.comgraph.microsoft.comapi.postboi.app
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The CLI is the `postboi` binary; its prepare script runs `svelte-kit sync` and does not contact a network service.
- Provider credentials are collected during the explicit `init` flow, saved to selected environment files, and may be synced to the Postboi account when `POSTBOI_TOKEN` is available.
- The CLI’s team sync filters out `POSTBOI_` variables and reports that credentials were synced to the user's Postboi account.
- Microsoft 365 client credentials are sent to Microsoft's OAuth endpoint to obtain a Graph token.
Evidence against
- The CLI can upload third-party provider credentials during `init` without a separate confirmation immediately before syncing, when a Postboi account token is present; the flow describes this as team credential sync.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
10 flaggeddist/cli.jsView file
76const { join } = await import("node:path");
L77: const dir = process.cwd();
L78: for (const file of [".env", ".env.local", ".dev.vars", ".dev.vars.local"]) {
...
L87: function read_env(name) {
L88: if (typeof process !== "undefined" && process.env) {
L89: const value = process.env[name];
...
L242: throw refused("POSTBOI_WORKLOAD_ID must be a workload ID from your team's API keys page.");
L243: if (get("GITHUB_ACTIONS") !== "true")
L244: throw refused("GitHub workload sign-in is only available inside GitHub Actions. Use postboi init for local sign-in.");
...
L280: try {
L281: const audience = `https://postboi.app/workloads/${id}`;
L282: endpoint.searchParams.set("audience", audience);
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli.jsView on unpkg · L7676const { join } = await import("node:path");
L77: const dir = process.cwd();
L78: for (const file of [".env", ".env.local", ".dev.vars", ".dev.vars.local"]) {
...
L87: function read_env(name) {
L88: if (typeof process !== "undefined" && process.env) {
L89: const value = process.env[name];
...
L242: throw refused("POSTBOI_WORKLOAD_ID must be a workload ID from your team's API keys page.");
L243: if (get("GITHUB_ACTIONS") !== "true")
L244: throw refused("GitHub workload sign-in is only available inside GitHub Actions. Use postboi init for local sign-in.");
...
L280: try {
L281: const audience = `https://postboi.app/workloads/${id}`;
L282: endpoint.searchParams.set("audience", audience);
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
Findings
3 Critical6 High4 Medium5 Low
CriticalCredential Exfiltrationdist/cli.js
CriticalBrowser Credential Phishingdist/cli.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighKnown Malware Source Similaritydist/inbox_server.js
HighKnown Malware Source Similaritydist/views.js
HighKnown Malware Source Similaritydist/webhooks/vonage.js
MediumDynamic Requiredist/workers_env.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to postboi@0.77.0.
See all versions of postboi for other recorded verdicts.
- Review the evidence and your use of postboi@0.77.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.