ts-prorm-orm@4.7.0
A TypeScript ORM for MySQL, PostgreSQL, SQLite, MSSQL, and more
AI Security Review
scanned 21h ago · by lpm-firewall-aiThe CLI supports an API URL override and sends its existing token to that destination without a host restriction, creating conditional credential exposure. The default host is package-aligned, so the evidence supports a warning rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs a CLI command that makes an authenticated API request while a non-default API URL is configured.
Impact
The configured recipient can receive the CLI session token.
Mechanism
The API client builds the request URL from the configured base and adds the saved token as a bearer credential without restricting the recipient host.
AI rationale
The CLI supports an API URL override and sends its existing token to that destination without a host restriction, creating conditional credential exposure. The default host is package-aligned, so the evidence supports a warning rather than a publish block.
Evidence
dist/cli/core/cloud.jsdist/cli/basic/commands/auth.js
Network endpoints1
api.prod-orm.io
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI accepts an API URL override and can use an existing saved or keychain token.
- The API client sends that token as a bearer credential to the configured API URL.
- A signed-in status check makes an API request automatically unless verification is disabled.
- The package manifest shows no install hook that performs this transfer.
Evidence against
- The configured default API host is the package’s stated control plane.
- The scanner’s flagged upload helper sends a caller-supplied file to a caller-supplied URL and does not read credentials.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
3 flagged · loading sourcedist/schema-types.jsView file
31exports.buildNextSequenceValueSQL = buildNextSequenceValueSQL;
L32: const schema_objects_1 = require("./schema-objects");
L33: /**
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/schema-types.jsView on unpkg · L31dist/cli/core/io.jsView file
70const stream = fs.createReadStream(filePath);
L71: const res = await fetch(url, {
L72: method: 'PUT',
L73: // Node's fetch (undici) requires duplex for a stream body.
L74: body: stream_1.Readable.toWeb(stream),
L75: duplex: 'half',
...
L87: if (!res.body) {
L88: fs.writeFileSync(dest, Buffer.from(await res.arrayBuffer()));
L89: return;
...
L160: const g = (0, framework_1.getGlobalOptions)();
L161: const active = Boolean(process.stderr.isTTY) && !g.quiet && !g.json;
L162: if (!active) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli/core/io.jsView on unpkg · L70dist/compliance/backup-verification.js#virtual:normalized:round1
Findings
1 Critical1 High4 Medium6 Low
CriticalCredential Exfiltrationdist/cli/core/io.js
HighSemantic Analysis Limiteddist/compliance/backup-verification.js#virtual:normalized:round1
MediumDynamic Requiredist/schema-types.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ts-prorm-orm@4.7.0.
See all versions of ts-prorm-orm for other recorded verdicts.
- Review the evidence and your use of ts-prorm-orm@4.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.