registry / @acedatacloud/nexior / 3.375.0
@acedatacloud/nexior@3.375.0
<div align="center">
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection found the flagged clipboard APIs serving ordinary copy and paste behavior, with no cryptocurrency-address substitution path. The prepare script runs Husky and does not establish malicious install-time behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Clipboard access occurs through browser UI copy or paste operations.
Impact
No confirmed malicious impact or attack surface was established.
Mechanism
The inspected helpers copy supplied text or read clipboard text; no address matching, substitution, or background polling was found.
AI rationale
Source inspection found the flagged clipboard APIs serving ordinary copy and paste behavior, with no cryptocurrency-address substitution path. The prepare script runs Husky and does not establish malicious install-time behavior.
Decision evidence
public snapshotAI called this Clean at 76.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json contains a prepare hook that runs Husky, with no preinstall, install, or postinstall hook.
- The flagged main bundle’s clipboard helpers read and write clipboard text through the browser API; inspected call sites are for copying or user-selected text, with no cryptocurrency-address replacement flow found.
- The other flagged high-risk bundle imports application modules; no clipboard API reference was found there.
- The cited bundle paths contain app or library imports and UI components; these excerpts do not show malicious behavior.
Evidence against
- Static hints label a critical clipboard finding, but source inspection found no automatic clipboard monitoring or wallet-address substitution behavior.
Behavioral surface
CryptoEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetry
Source & flagged code
3 flaggeddist/assets/index-Dn-8sNW2.jsView file
1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/aegis.min-C7H4WXnC.js","assets/rolldown-runtime--c01j_DQ.js","assets/index.es-LzqQdC6F.js","assets/preload-helper-z...
L2: import{o as e,r as t,t as n}from"./rolldown-runtime--c01j_DQ.js";import{$ as r,A as i,At as a,B as o,Bt as s,C as c,D as l,Dt as u,E as d,Et as f,G as p,Gt as m,H as h,I as g,It as...
L3: `)>=0)return!1;return!0}function De(e,t){var n;if(e.indent===` `)n=` `;else if(typeof e.indent==`number`&&e.indent>0)n=C.call(Array(e.indent+1),` `);else return null;return{base:n,...
L4: `+t.prev+t.base;return n+C.call(e,`,`+n)+`
L5: `+t.prev}function ke(e,t){var n=M(e),r=[];if(n){r.length=e.length;for(var i=0;i<e.length;i++)r[i]=he(e,i)?t(e[i],e):``}var a=typeof D==`function`?D(e):[],o;if(O){o={};for(var s=0;s...
L
Critical
Clipboard Crypto Hijack
Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.
dist/assets/index-Dn-8sNW2.jsView on unpkg · L1dist/assets/fp.esm-DXwZrSgh.js#virtual:string-array:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Findings
1 Critical2 High2 Medium7 Low
CriticalClipboard Crypto Hijackdist/assets/index-Dn-8sNW2.js
HighSemantic Analysis Limiteddist/assets/fp.esm-DXwZrSgh.js#virtual:string-array:round1
HighPrevious Version Dangerous Deltadist/assets/Index-DAlEnN66.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @acedatacloud/nexior@3.375.0.
See all versions of @acedatacloud/nexior for other recorded verdicts.
- Review the evidence and your use of @acedatacloud/nexior@3.375.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.