registry / @infcode/cli-windows-x64 / 1.0.1
@infcode/cli-windows-x64@1.0.1
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest declares no install hooks or automatic entry points. The flagged helper requires explicit use and sends its configured token to the user-provided DeepMap service URL, consistent with its documented purpose.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
An explicit DeepMap list, search, or ask command.
Impact
Expected authenticated DeepMap requests; no unrelated credential disclosure or harmful automatic behavior was found.
Mechanism
The helper reads siteUrl and token from supplied configuration and sends the bearer token to that configured URL.
AI rationale
The manifest declares no install hooks or automatic entry points. The flagged helper requires explicit use and sends its configured token to the user-provided DeepMap service URL, consistent with its documented purpose.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest only identifies a Windows x64 package and declares no lifecycle scripts, bin, main, or exports.
- The DeepMap helper is documented as running through explicit list, search, or ask commands.
- The helper reads its site URL and bearer token from user-supplied configuration.
- The helper sends its token to the configured URL for DeepMap requests.
Evidence against
- No install-time hook or automatic network contact is declared.
- The helper uses the configured service URL rather than a hard-coded unrelated host.
- Bundled Windows binaries and image-processing dependencies are consistent with a platform-specific CLI package.
Behavioral surface
EvalNetwork
NoLicense
Source & flagged code
9 flaggedbin/event_tracking_rs_bg.mjsView file
2351export function __wbg_new_no_args_ee98eee5275000a4(arg0, arg1) {
L2352: const ret = new Function(getStringFromWasm0(arg0, arg1));
L2353: return ret;
Low
Eval
Package source references a known benign dynamic code generation pattern.
bin/event_tracking_rs_bg.mjsView on unpkg · L2351bin/rg-win7.exeView file
•path = bin/rg-win7.exe
kind = native_binary
sizeBytes = 5407744
magicHex = [redacted]
Medium
bin/tree-sitter/tree-sitter-elm.wasmView file
Findings
1 High5 Medium6 Low
HighKnown Malware Source Similaritybin/image-runtime/node_modules/sharp/dist/constructor.cjs
MediumNetwork
MediumShips Native Binarybin/rg-win7.exe
MediumShips Wasm Modulebin/tree-sitter/tree-sitter-elm.wasm
MediumShips Build Helperbin/deepmap-skill/scripts/deepmap.sh
MediumStructural Risk Force Deep Review
LowEvalbin/event_tracking_rs_bg.mjs
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/deepmap-skill/SKILL.md
LowAi Review Evidencebin/deepmap-skill/scripts/deepmap.sh
LowAi Review Evidencebin/deepmap-skill/scripts/deepmap.sh
Affected versions and remediation
This report applies to @infcode/cli-windows-x64@1.0.1.
See all versions of @infcode/cli-windows-x64 for other recorded verdicts.
- Review the evidence and your use of @infcode/cli-windows-x64@1.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.