ts-prorm-orm@2.1.0
A TypeScript ORM for MySQL, PostgreSQL, SQLite, MSSQL, and more
AI Security Review
scanned 23h ago · by lpm-firewall-aiThe published CLI’s login path forwards a dashboard access token to a package-selected preview host by default. This is a concrete credential disclosure, so the package should be blocked.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI login flow with a dashboard access token, or completes browser authentication.
Impact
The dashboard access token is disclosed to the default host, which may expose the associated account session.
Mechanism
The login flow calls the authenticated `whoami` endpoint, and the API client attaches the token as a Bearer header to a request using the default API host.
Attack narrative
When a user logs in, the CLI sends the dashboard access token to its default API host, `docs-next-alpha.vercel.app`. The source provides an override, but that does not make the unchanged default operator-selected or establish consent to send the token there.
AI rationale
The published CLI’s login path forwards a dashboard access token to a package-selected preview host by default. This is a concrete credential disclosure, so the package should be blocked.
Evidence
package.jsondist/cli/commands/auth.jsdist/cli/cloud.js
Network endpoints1
docs-next-alpha.vercel.app
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- The published CLI exposes `dist/cli.js` as its `orm-cli` command.
- The CLI defaults its API base to `https://docs-next-alpha.vercel.app` unless an environment override is set.
- The login flow sends the supplied dashboard access token to the `whoami` API call.
- The API client includes that token as a Bearer authorization header in its HTTP request.
Evidence against
- The CLI accepts an explicit API URL override, but this does not change the package-selected default recipient.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcedist/cli/commands/db.jsView file
62patternName = generic_password
severity = medium
line = 62
Medium
dist/migrations/prormmigration.jsView file
7exports.PrormMigration = void 0;
L8: const query_interface_1 = require("./query-interface");
L9: /**
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/migrations/prormmigration.jsView on unpkg · L7dist/cli/io.jsView file
70const stream = fs.createReadStream(filePath);
L71: const res = await fetch(url, {
L72: method: 'PUT',
L73: // Node's fetch (undici) requires duplex for a stream body.
L74: body: stream_1.Readable.toWeb(stream),
L75: duplex: 'half',
...
L87: if (!res.body) {
L88: fs.writeFileSync(dest, Buffer.from(await res.arrayBuffer()));
L89: return;
...
L160: const g = (0, framework_1.getGlobalOptions)();
L161: const active = Boolean(process.stderr.isTTY) && !g.quiet && !g.json;
L162: if (!active) {
Findings
3 Critical2 High5 Medium6 Low
CriticalCredential Exfiltrationdist/cli/io.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli/io.js
CriticalPrevious Version Dangerous Deltadist/cli/cloud.js
HighTrigger Reachable Credential Exfiltrationdist/cli/io.js
HighSemantic Analysis Limiteddist/compliance/backup-verification.js#virtual:normalized:round1
MediumSecret Patterndist/cli/commands/db.js
MediumDynamic Requiredist/migrations/prormmigration.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
Affected versions and remediation
This report applies to ts-prorm-orm@2.1.0.
See all versions of ts-prorm-orm for other recorded verdicts.
- Avoid installing ts-prorm-orm@2.1.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.