pypi / utim-cli / 2.6.3

utim-cli 2.6.3

Riskcritical Vulnsmedium

processes: 725
operations: 62K
packages: 43
compiler runs: 3
connections: 6
build time: 1m 04s
job time: 1m 04s
capture: 572 KB
records: 98K
bytes / record: 5.8

run 9d34a441-5ecc-4731-823c-465d05c1f22e · built 2026-11-06 · complete View on PyPI Release

Graph

secret-exfil · critical

Checks

15 of 19 clear Network activity Sensitive data access and transfer +2 more

Build behavior▲▲✓✓✓✓✓✓✓✓✓

Supply chain▲▲✓✓✓✓✓

Pipeline✓

Detections

Credential store contents reached a network peer

api.utim.dev:443 › api.utim.dev:443

critical
Credential store contents reached a network peer

open.er-api.com:443 › open.er-api.com:443

critical
Credential store contents reached a network peer

openrouter.ai:443 › openrouter.ai:443

critical
Package code connected to an undeclared host

api.utim.dev:443 › api.utim.dev:443, pypi.org

medium
Package code dialled an undeclared host, and nothing answered

files.pythonhosted.org:443 › files.pythonhosted.org:443, pypi.org

medium
Package code connected to an undeclared host

registry.npmjs.org:443 › registry.npmjs.org:443, pypi.org

medium

Network

6 peers

api.utim.dev:443 utim-cli's own build code · python3.14 (utim-cli); utim (utim-cli) unjudged
files.pythonhosted.org:443 utim-cli's own build code · utim (utim-cli) unjudged
open.er-api.com:443 utim-cli's own build code · python3.14 (utim-cli) · Cloudflare, Inc. unjudged
openrouter.ai:443 utim-cli's own build code · python3.14 (utim-cli) · Cloudflare, Inc. unjudged
registry.npmjs.org:443 utim-cli's own build code · utim (utim-cli) · Cloudflare, Inc. unjudged
files.pythonhosted.org:8080 the package manager · python3.14 (utim-cli) via pypi.org ecosystem

Vulnerabilities7		Fix	Severity
Dependencies
pip 25.1.1		>=26.2.0
CVE-2025-8869	pip's fallback tar extraction doesn't check symbolic links point to extraction directory		medium
CVE-2026-13346	pip would incorrectly handle doubly-encoded package URLs from indexes		medium
CVE-2026-3219	pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files		medium
CVE-2026-6357	pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere		medium
CVE-2026-8643	pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory		medium
CVE-2026-1703	pip Path Traversal vulnerability		low
python-dotenv 1.0.1		>=1.2.2
CVE-2026-28684	python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback		medium

Dependencies43	Build behaviour
aiohappyeyeballs2.7.1
aiohttp3.14.5
aiosignal1.4.0
annotated-doc0.0.5
anyio4.16.0
attrs26.1.0
build1.6.1
certifi2026.10.23
chardet4.0.0
charset-normalizer3.5.2
colorama0.4.6
frozenlist1.8.0
h110.16.0
httpcore1.0.9
httpx0.28.1
idna3.20
iniconfig2.3.1
markdown-it-py4.2.0
mdurl0.1.2
multidict7.2.1
nest-asyncio1.6.0
packaging26.3
pluggy1.7.0
prompt-toolkit3.0.53
propcache0.5.4
pygments2.21.0
pyproject-hooks1.3.3
pytest9.2.0
python-dotenv1.0.1
requests2.34.2
rich15.0.0
shellingham1.5.4
sqlalchemy2.1.8
typer0.28.0
typing-extensions4.16.0
urllib32.8.0
wcwidth0.9.4
yarl1.25.1
pip25.1.1
pip26.3
setuptools84.2.1
wheel0.48.0
~ip25.1.1

Versions130

1 of 1 jobs captured: build-import success · Generated 2026-11-06 · run 9d34a441-5ecc-4731-823c-465d05c1f22e

analysis 0.1.0 · 2026-11-06 · 4346b99 · graph v2

utim-cli: a terminal AI assistant that sends on-by-default typing telemetry to api.utim.dev

Conclusion: phone-home
Covers: 2.6.3
Reviewed by: Bitbison
Updated: 2026-11-06

utim-cli is UTIM, a proprietary terminal AI coding assistant whose on-by-default usage telemetry reports typing cadence to its publisher.

utim-cli is UTIM, a proprietary agentic AI coding assistant for the terminal, installed as the utim and utimlite commands. It is not malicious: its network use is its own backend at api.utim.dev, the OpenRouter LLM provider, a currency-rate lookup, and a startup version lookup against npm, PyPI and api.utim.dev. It does, however, send on-by-default usage telemetry to its publisher, which is why this review concludes phone-home. The project has been on PyPI since June 29, 2026, and version 2.6.3 was published on November 6, 2026; the index still serves it.

What utim-cli does

utim-cli is a terminal AI assistant that calls large language models and runs coding tools. On launch it queries registry.npmjs.org, pypi.org and api.utim.dev for the latest published version (update_checker.py:52-53, 157-174). It reads API keys from a .env file in the current directory or from ~/.utim/.env and uses them to talk to its backend at api.utim.dev and to the OpenRouter chat API at openrouter.ai (orchestrator.py:186-214, 142, 241). It also fetches a USD exchange rate from open.er-api.com for billing display (server/exchange_rate.py:18). When a model request is routed through the UTIM backend, the client adds an X-UTIM-Telemetry header carrying typing-cadence counters to api.utim.dev (orchestrator_llm_transport.py:454-463, 1616-1623).

What the code does

behavior_telemetry.py:64-65 — telemetry is enabled unless UTIM_TELEMETRY is 0, false or no; the default is on.
behavior_telemetry.py:142-189 — snapshot() and telemetry_header_value() collect counters: typing characters, typing seconds, keystrokes, corrections, paste events, session seconds and idle seconds. No prompt text or file content is collected.
orchestrator_llm_transport.py:454-463 and 1616-1623 — the counters are sent as an X-UTIM-Telemetry header on requests to api.utim.dev; setting UTIM_TELEMETRY=0 disables the header.
orchestrator.py:186-214, 224-228 — the client loads .env from the current directory and ~/.utim/.env, then reads OPENROUTER_API_KEY, OPENAI_API_KEY, ANTHROPIC_API_KEY or UTIM_API_KEY.
orchestrator.py:142, 241 — the backend URL is https://api.utim.dev and the OpenRouter endpoint is https://openrouter.ai/api/v1/chat/completions.
orchestrator_llm_transport.py:440-463 — an OpenRouter key is sent as a Bearer token to openrouter.ai, and a UTIM key is sent as X-API-Key to api.utim.dev; each key goes only to the service it belongs to.
update_checker.py:52-53, 157-174, 288-289 — the startup version lookup queries registry.npmjs.org, pypi.org and api.utim.dev; UTIM_SKIP_UPDATE_CHECK=1 disables it.
server/exchange_rate.py:18 — a no-credential GET to https://open.er-api.com/v6/latest/USD.

Timeline (UTC)

When	What
June 29, 2026	utim-cli first published on PyPI (130 versions since)
November 6, 2026 17:49	version 2.6.3 published
November 6, 2026 18:56	still served on PyPI; the project has been up about four months, 2.6.3 for about an hour

If you installed it

Set UTIM_TELEMETRY=0 to stop the typing-cadence telemetry header (behavior_telemetry.py:64-65). Set UTIM_SKIP_UPDATE_CHECK=1 to stop the startup version lookup (update_checker.py:288-289); the version lookup is not telemetry. The package ships no credentials of its own, and API keys from your .env are sent only to the service they authenticate to.

Indicators

hosts: api.utim.dev
files
processes

What was examined

2.6.3: sha256:f8a81abb2e9508cd6e8fd192b17662ebb168a9d9c562e8caaee02c44c7facc02