registry / @nexushub/client / 0.7.4
@nexushub/client@0.7.4
⚠ Under review@nexushub/client has been rebranded to @gnapex/sdk. Please install @gnapex/sdk@^1.0.0.
The God-Tier NexusHub SDK
Static Scan Results
scanned 53m ago · by rust-scannerStatic analysis completed at 93.0% confidence. No malicious behavior was detected; 16 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flaggeddist/cli.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @nexushub/client@1.1.13
matchedIdentity = npm:QG5leHVzaHViL2NsaWVudA:1.1.13
similarity = 0.350
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.cjsView on unpkg25\r
L26: `),i=!1,a=!1,l;n.on("response",u=>{let{headers:f}=u;i=f["transfer-encoding"]==="chunked"&&!f["content-length"]}),n.on("socket",u=>{let f=()=>{if(i&&!a){let d=new Error("Premature c...
L27: \u{1F6A8} NexusHub Security Alert: Data Integrity Violation in file:
High
17`);return l!==-1&&(t=La(t,a,i,l)),i+t+a};Object.defineProperties(Yr.prototype,yr);var ff=Yr(),sh=Yr({level:Ba?Ba.level:0});var w=ff;var Tr=X(require("process"),1),rl=require("util"...
L18: ${t}`,gf=Object.getOwnPropertyDescriptor(Function.prototype,"toString"),yf=Object.getOwnPropertyDescriptor(Function.prototype.toString,"name"),bf=(n,t,o)=>{let i=o===""?"":`with ${...
L19: `),d=u-1;i=[...g.slice(0,d),"... (content truncated to fit terminal)"].join(`
...
L25: \r
L26: `),i=!1,a=!1,l;n.on("response",u=>{let{headers:f}=u;i=f["transfer-encoding"]==="chunked"&&!f["content-length"]}),n.on("socket",u=>{let f=()=>{if(i&&!a){let d=new Error("Premature c...
L27: \u{1F6A8} NexusHub Security Alert: Data Integrity Violation in file:
Findings
1 Critical6 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.cjs
HighChild Processdist/cli.cjs
HighShell
HighSame File Env Network Executiondist/cli.cjs
HighCommand Output Exfiltrationdist/cli.cjs
HighTrigger Reachable Command Output Exfiltrationdist/cli.cjs
HighRuntime Package Installdist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @nexushub/client@0.7.4.
See all versions of @nexushub/client for other recorded verdicts.
- Review the evidence and your use of @nexushub/client@0.7.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.