ts-prorm-orm@2.0.0

⚠ Under review

A TypeScript ORM for MySQL, PostgreSQL, SQLite, MSSQL, and more

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The token transfer is real, but source inspection does not establish that the default host is unrelated to the dashboard, so a concrete attack is unconfirmed. Manual review is appropriate for the unresolved recipient identity.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A user invokes CLI login or another authenticated cloud command.

Impact

If that host is not the intended dashboard API, the token could be exposed to an unintended recipient.

Mechanism

The CLI sends a bearer token to the configured API, which defaults to https://docs-next-alpha.vercel.app.

AI rationale

Evidence

dist/cli/cloud.jsdist/cli/commands/auth.js

Network endpoints1

docs-next-alpha.vercel.app

Decision evidence

public snapshot

AI called this Manual Review at 52.0% confidence as Unknown with medium false-positive risk.

AI review observations

The CLI uses a fixed default API host and sends dashboard access tokens to it during login; the inspected source does not establish whether that host is the intended dashboard.

Evidence against

The flagged I/O helper uploads a caller-selected local file to a supplied URL; it does not read environment variables or credentials.
The manifest’s prepare hook runs Husky.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 353 file(s), 6.31 MB of source, external domains: api.cloudflare.com, api.example.com, api.sumologic.com, app.prorm.dev, bucket.s3.amazonaws.com, clickhouse.com, dev.mysql.com, docs-next-alpha.vercel.app, docs.aws.amazon.com, docs.oracle.com, docs.snowflake.com, docs.timescale.com, github.com, hypopg.readthedocs.io, learn.microsoft.com, mariadb.com, papertrailapp.com, pgrouting.org, postgis.net, registry.npmjs.org, www.ibm.com, www.postgresql.org, www.sqlite.org, www.w3.org

Source & flagged code

7 flagged

dist/cli/commands/db.jsView file

Lines 42-82javascript

42 // Validate discrete connection parts client-side when no --url is given

43 // (sqlite/file dialects don't need a host, only a database/path).

44 if (!url) {

45 const needsHost = dialect !== 'sqlite';

46 const missing = [];

47 if (needsHost && !host)

48 missing.push('--host');

49 if (needsHost && port === undefined)

50 missing.push('--port');

51 if (!database)

52 missing.push('--database');

53 if (missing.length) {

54 framework_1.out.error(`Missing ${missing.join(', ')} (or pass --url for a full connection string).`);

55 return 1;

56 }

57 }

58 // Prompt for the password without leaking it into shell history when

59 // --password is given without a value.

60 let password = str(ctx.flags.password);

61 if (ctx.flags.password !== undefined && !password) {

62 password = await (0, prompt_1.promptHidden)('Database password: ') || undefined;

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/cli/commands/db.jsView on unpkg · L62

63 }

64 const body = {

65 name: ctx.flags.name,

66 dialect,

67 host,

68 port,

69 database,

70 username: str(ctx.flags.username),

71 password,

72 url,

73 team: str(ctx.flags.team),

74 ssl: ctx.flags.ssl !== false,

75 };

76 const data = await (0, cloud_1.api)('/api/dashboard/databases', { method: 'POST', body });

77 framework_1.out.success(`Connected database ${data.name} (${data.id})`);

78 return 0;

79 },

80});

81const list = (0, framework_1.defineCommand)({

82 name: 'db list',

dist/migrations/prormmigration.jsView file

Lines 1-27javascript

1"use strict";

2/**

3 * PrormMigration class - Integration layer between migrations and Prorm

4 * Handles running migrations with the Prorm instance

5 */

6Object.defineProperty(exports, "__esModule", { value: true });

7exports.PrormMigration =

dist/cli/io.jsView file

Lines 50-90javascript

50const framework_1 = require("./framework");

51const prompt_1 = require("./prompt");

52// ─── Overwrite protection ──────────────────────────────────────────────────────

53/**

54 * Guard a local write: if `dest` already exists, confirm before clobbering it.

dist/compliance/backup-verification.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 32

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/compliance/backup-verification.js#virtual:normalized:round1View on unpkg

dist/cli/cloud.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = ts-prorm-orm@1.1.0 matchedIdentity = npm:dHMtcHJvcm0tb3Jt:1.1.0 similarity = 0.367 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/cloud.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/cli/commands/db.jsView file

62patternName = generic_password severity = medium line = 62

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/cli/commands/db.jsView on unpkg · L62

dist/migrations/prormmigration.jsView file

7exports.PrormMigration = void 0; L8: const query_interface_1 = require("./query-interface"); L9: /**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/migrations/prormmigration.jsView on unpkg · L7

dist/cli/io.jsView file

70const stream = fs.createReadStream(filePath); L71: const res = await fetch(url, { L72: method: 'PUT', L73: // Node's fetch (undici) requires duplex for a stream body. L74: body: stream_1.Readable.toWeb(stream), L75: duplex: 'half', ... L87: if (!res.body) { L88: fs.writeFileSync(dest, Buffer.from(await res.arrayBuffer())); L89: return; ... L160: const g = (0, framework_1.getGlobalOptions)(); L161: const active = Boolean(process.stderr.isTTY) && !g.quiet && !g.json; L162: if (!active) {

Findings

3 Critical2 High5 Medium6 Low

CriticalCredential Exfiltrationdist/cli/io.js

CriticalTrigger Reachable Dangerous Capabilitydist/cli/io.js

CriticalPrevious Version Dangerous Deltadist/cli/cloud.js

HighTrigger Reachable Credential Exfiltrationdist/cli/io.js

HighSemantic Analysis Limiteddist/compliance/backup-verification.js#virtual:normalized:round1

MediumSecret Patterndist/cli/commands/db.js

MediumDynamic Requiredist/migrations/prormmigration.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEval

Affected versions and remediation

This report applies to ts-prorm-orm@2.0.0.

See all versions of ts-prorm-orm for other recorded verdicts.

Review the evidence and your use of ts-prorm-orm@2.0.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 06:26:17.669Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.