registry / @acedatacloud/nexior / 3.373.1
@acedatacloud/nexior@3.373.1
⚠ Under review<div align="center">
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe manifest and inspected clipboard excerpts do not establish a malicious lifecycle action or wallet-address rewrite. Because the flagged bundle has bounded semantic-analysis coverage and the scanner's critical claim remains unresolved, manual review is appropriate.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Unresolved; no malicious trigger was verified.
Impact
No attack impact was confirmed; further source review is needed to resolve the scanner's wallet-tampering claim.
Mechanism
The inspected clipboard code provides generic browser read, write, and copy helpers; the examined excerpts do not show wallet-address substitution.
AI rationale
The manifest and inspected clipboard excerpts do not establish a malicious lifecycle action or wallet-address rewrite. Because the flagged bundle has bounded semantic-analysis coverage and the scanner's critical claim remains unresolved, manual review is appropriate.
Evidence
dist/assets/index-BhuKiXPa.js
Decision evidence
public snapshotAI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest's only lifecycle hook runs Husky through `prepare`.
- The flagged bundle contains browser clipboard read and write helpers and a copy handler that uses caller-provided text; inspected matches did not establish wallet-address monitoring or replacement.
Evidence against
- The scanner flags the main bundle for clipboard-based cryptocurrency address rewriting, but source inspection found only generic clipboard helpers in the examined matches.
- The package snapshot reports bounded semantic-analysis coverage for the flagged bundle, leaving its full behavior unresolved.
Behavioral surface
CryptoEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
3 flaggeddist/assets/index-BhuKiXPa.jsView file
1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/aegis.min-C7H4WXnC.js","assets/rolldown-runtime--c01j_DQ.js","assets/index.es-LzqQdC6F.js","assets/preload-helper-z...
L2: import{o as e,r as t,t as n}from"./rolldown-runtime--c01j_DQ.js";import{$ as r,A as i,At as a,B as o,Bt as s,C as c,D as l,Dt as u,E as d,Et as f,G as p,Gt as m,H as h,I as g,It as...
L3: `)>=0)return!1;return!0}function De(e,t){var n;if(e.indent===` `)n=` `;else if(typeof e.indent==`number`&&e.indent>0)n=C.call(Array(e.indent+1),` `);else return null;return{base:n,...
L4: `+t.prev+t.base;return n+C.call(e,`,`+n)+`
L5: `+t.prev}function ke(e,t){var n=M(e),r=[];if(n){r.length=e.length;for(var i=0;i<e.length;i++)r[i]=he(e,i)?t(e[i],e):``}var a=typeof D==`function`?D(e):[],o;if(O){o={};for(var s=0;s...
L
Critical
Clipboard Crypto Hijack
Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.
dist/assets/index-BhuKiXPa.jsView on unpkg · L1dist/assets/Conversation-1eQVGxUu.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3
Findings
1 Critical2 High2 Medium7 Low
CriticalClipboard Crypto Hijackdist/assets/index-BhuKiXPa.js
HighSemantic Analysis Limiteddist/assets/Conversation-1eQVGxUu.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/assets/Index-BeblsjhL.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @acedatacloud/nexior@3.373.1.
See all versions of @acedatacloud/nexior for other recorded verdicts.
- Review the evidence and your use of @acedatacloud/nexior@3.373.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.