registry / @acedatacloud/nexior / 3.371.1
@acedatacloud/nexior@3.371.1
<div align="center">
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe flagged clipboard code is consistent with wallet address copying, and the other inspected high-risk hint resolves to markdown rendering code. The manifest and required source paths show no confirmed attack behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the wallet address copy action; package preparation runs the declared Husky hook.
Impact
No confirmed security impact was identified.
Mechanism
The clipboard helper writes the supplied address when called and defaults clipboard reading off; the inspected sources show no malicious transfer or mutation.
AI rationale
The flagged clipboard code is consistent with wallet address copying, and the other inspected high-risk hint resolves to markdown rendering code. The manifest and required source paths show no confirmed attack behavior.
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest’s prepare hook runs Husky; the package publishes its dist directory.
- The flagged clipboard helper defaults to not reading clipboard contents, and the wallet caller uses it to copy the connected public address.
- The flagged markdown asset renders its supplied source; inspected imports and the required asset paths show UI components, icons, or vendor modules, with no confirmed attack behavior.
- The models and Axios hints point to state-inspector editing and cancellation support, respectively.
Evidence against
Behavioral surface
ChildProcessCryptoFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
4 flaggeddist/assets/solana-wallets-vue-C76KtNoS.jsView file
1import{A as e,At as t,B as n,C as r,Ct as i,Dt as a,E as o,Et as s,Gt as c,I as l,Jt as u,K as d,Kt as f,L as p,M as m,Mt as h,N as g,Ot as _,Q as v,T as y,V as b,at as x,ft as S,g...
L2: `;t+=`${e.address}`,e.statement&&(t+=`
...
L6: ${n.join(`
L7: `)}`),t}var V={ERROR_ASSOCIATION_PORT_OUT_OF_RANGE:`ERROR_ASSOCIATION_PORT_OUT_OF_RANGE`,ERROR_REFLECTOR_ID_OUT_OF_RANGE:`ERROR_REFLECTOR_ID_OUT_OF_RANGE`,ERROR_FORBIDDEN_WALLET_BA...
L8: ]))+`;G.KANJI=new RegExp(e,`g`),G.BYTE_KANJI=RegExp(`[^A-Z0-9 $%*+\\-./:]+`,`g`),G.BYTE=new RegExp(t,`g`),G.NUMERIC=RegExp(`[0-9]+`,`g`),G.ALPHANUMERIC=RegExp(`[A-Z $%*+\\-./:]+`,`...
Critical
Clipboard Crypto Hijack
Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.
dist/assets/solana-wallets-vue-C76KtNoS.jsView on unpkg · L1dist/assets/VueMarkdown-CiiRjbWs.jsView file
•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
1 Critical2 High2 Medium7 Low
CriticalClipboard Crypto Hijackdist/assets/solana-wallets-vue-C76KtNoS.js
HighSemantic Analysis Limiteddist/assets/VueMarkdown-CiiRjbWs.js
HighPrevious Version Dangerous Deltadist/assets/VueMarkdown-CiiRjbWs.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to @acedatacloud/nexior@3.371.1.
See all versions of @acedatacloud/nexior for other recorded verdicts.
- Review the evidence and your use of @acedatacloud/nexior@3.371.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.