registry / @h3nr1-d14z/nat-gate / 2.1.0

@h3nr1-d14z/nat-gate@2.1.0

CLI tool for managing iptables port forwarding through Tailscale tunnels

AI Security Review

scanned 24d ago · by lpm-firewall-ai

Installing the package downloads the latest release binary and runs it automatically. The downloaded artifact is neither version-pinned nor integrity-checked.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation, through postinstall.

Impact

A changed or compromised release asset can run code with the installer's permissions.

Mechanism

Remote binary download followed by install-time execution.

AI rationale

This is an unresolved install-time remote-code-execution supply-chain risk, although the inspected JavaScript contains no direct theft or destructive logic. The source does not establish malicious intent, so it warrants a warning rather than a publication block.

Evidence

package.jsonscripts/install.jsbin/nat-gate

Network endpoints2

api.github.comgithub.com/h3nr1-d14z/nat-gate/releases/latest

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

@h3nr1-d14z/nat-gate@2.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code