ts-prorm-orm@4.6.4
A TypeScript ORM for MySQL, PostgreSQL, SQLite, MSSQL, and more
AI Security Review
scanned 21h ago · by lpm-firewall-aiThe API client sends saved credentials to an unrestricted configurable destination, creating a conditional credential exposure risk. The default destination is the package's service API, and the exposure requires a custom host configuration, so this supports a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs a CLI command that makes an authenticated API request while a custom API URL is configured.
Impact
A misconfigured or untrusted API host could receive the service token; the default host is the package's service API.
Mechanism
The API client resolves the configured host and attaches the saved token as a bearer credential without restricting the destination.
AI rationale
The API client sends saved credentials to an unrestricted configurable destination, creating a conditional credential exposure risk. The default destination is the package's service API, and the exposure requires a custom host configuration, so this supports a warning rather than a block.
Evidence
dist/cli/core/cloud.jsdist/cli/basic/commands/auth.jsdist/hosts.js
Network endpoints1
api.prod-orm.io
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes CLI binaries, and the CLI defaults its API host to the package's service host.
- The API host can be overridden through environment, command-line, or saved configuration settings.
- The API client loads a saved token and sends it as a bearer credential to the resolved API URL, without a destination allowlist.
- Login validates and stores a supplied token through the same API client.
Evidence against
- The default API host is the package's documented control-plane host; the exposure depends on configuring a different API URL.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
3 flagged · loading sourcedist/schema-types.jsView file
31exports.buildNextSequenceValueSQL = buildNextSequenceValueSQL;
L32: const schema_objects_1 = require("./schema-objects");
L33: /**
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/schema-types.jsView on unpkg · L31dist/cli/core/io.jsView file
70const stream = fs.createReadStream(filePath);
L71: const res = await fetch(url, {
L72: method: 'PUT',
L73: // Node's fetch (undici) requires duplex for a stream body.
L74: body: stream_1.Readable.toWeb(stream),
L75: duplex: 'half',
...
L87: if (!res.body) {
L88: fs.writeFileSync(dest, Buffer.from(await res.arrayBuffer()));
L89: return;
...
L160: const g = (0, framework_1.getGlobalOptions)();
L161: const active = Boolean(process.stderr.isTTY) && !g.quiet && !g.json;
L162: if (!active) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli/core/io.jsView on unpkg · L70dist/compliance/backup-verification.js#virtual:normalized:round1
Findings
1 Critical1 High4 Medium6 Low
CriticalCredential Exfiltrationdist/cli/core/io.js
HighSemantic Analysis Limiteddist/compliance/backup-verification.js#virtual:normalized:round1
MediumDynamic Requiredist/schema-types.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ts-prorm-orm@4.6.4.
See all versions of ts-prorm-orm for other recorded verdicts.
- Review the evidence and your use of ts-prorm-orm@4.6.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.