registry / @acedatacloud/nexior / 3.372.2
@acedatacloud/nexior@3.372.2
⚠ Under review<div align="center">
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe inspected source does not support the scanner's clipboard-substitution claim, but the relevant runtime source review is incomplete. Manual review is needed to resolve behavior across the remaining bundles.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The manifest's prepare hook runs during package preparation; the inspected clipboard helper is activated when called by application code.
Impact
No concrete security impact is established by the inspected source; broader runtime behavior remains unresolved.
Mechanism
The helper conditionally reads clipboard text and copies its caller-provided value. The inspected excerpts do not establish whether other relevant bundles contain additional behavior.
AI rationale
The inspected source does not support the scanner's clipboard-substitution claim, but the relevant runtime source review is incomplete. Manual review is needed to resolve behavior across the remaining bundles.
Decision evidence
public snapshotAI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest's prepare script runs Husky.
- The inspected clipboard helper reads on copy or cut only when its read option is enabled, and writes the value passed to its copy function.
- The inspected carousel code uses an interval to advance slides.
Evidence against
- Searches in the flagged wallet bundle found no address-matching pattern; the inspected clipboard code does not show address substitution.
- The runtime bundle review remains incomplete, so the inspected excerpts do not resolve behavior across all relevant bundles.
Behavioral surface
CryptoEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
3 flaggeddist/assets/solana-wallets-vue-C76KtNoS.jsView file
1import{A as e,At as t,B as n,C as r,Ct as i,Dt as a,E as o,Et as s,Gt as c,I as l,Jt as u,K as d,Kt as f,L as p,M as m,Mt as h,N as g,Ot as _,Q as v,T as y,V as b,at as x,ft as S,g...
L2: `;t+=`${e.address}`,e.statement&&(t+=`
...
L6: ${n.join(`
L7: `)}`),t}var V={ERROR_ASSOCIATION_PORT_OUT_OF_RANGE:`ERROR_ASSOCIATION_PORT_OUT_OF_RANGE`,ERROR_REFLECTOR_ID_OUT_OF_RANGE:`ERROR_REFLECTOR_ID_OUT_OF_RANGE`,ERROR_FORBIDDEN_WALLET_BA...
L8: ]))+`;G.KANJI=new RegExp(e,`g`),G.BYTE_KANJI=RegExp(`[^A-Z0-9 $%*+\\-./:]+`,`g`),G.BYTE=new RegExp(t,`g`),G.NUMERIC=RegExp(`[0-9]+`,`g`),G.ALPHANUMERIC=RegExp(`[A-Z $%*+\\-./:]+`,`...
Critical
Clipboard Crypto Hijack
Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.
dist/assets/solana-wallets-vue-C76KtNoS.jsView on unpkg · L1dist/assets/List-DVoOkxLG.js#virtual:string-array:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3
High
Semantic Analysis Limited
Findings
1 Critical2 High2 Medium7 Low
CriticalClipboard Crypto Hijackdist/assets/solana-wallets-vue-C76KtNoS.js
HighSemantic Analysis Limiteddist/assets/List-DVoOkxLG.js#virtual:string-array:round1
HighPrevious Version Dangerous Deltadist/assets/Index-CzaQ-jKG.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @acedatacloud/nexior@3.372.2.
See all versions of @acedatacloud/nexior for other recorded verdicts.
- Review the evidence and your use of @acedatacloud/nexior@3.372.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.