registry / @nexushub/client / 0.8.5
@nexushub/client@0.8.5
⚠ Under review@nexushub/client has been rebranded to @gnapex/sdk. Please install @gnapex/sdk@^1.0.0.
The God-Tier NexusHub SDK
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/cli.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @nexushub/client@0.6.5
matchedIdentity = npm:QG5leHVzaHViL2NsaWVudA:0.6.5
similarity = 0.833
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.cjsView on unpkg25\r
L26: `),i=!1,a=!1,l;n.on("response",u=>{let{headers:p}=u;i=p["transfer-encoding"]==="chunked"&&!p["content-length"]}),n.on("socket",u=>{let p=()=>{if(i&&!a){let d=new Error("Premature c...
L27: \u{1F6A8} NexusHub Security Alert: Data Integrity Violation in file:
High
17`);return l!==-1&&(t=La(t,a,i,l)),i+t+a};Object.defineProperties(Yr.prototype,yr);var df=Yr(),sh=Yr({level:Ba?Ba.level:0});var E=df;var Tr=J(require("process"),1),rl=require("util"...
L18: ${t}`,yf=Object.getOwnPropertyDescriptor(Function.prototype,"toString"),bf=Object.getOwnPropertyDescriptor(Function.prototype.toString,"name"),_f=(n,t,o)=>{let i=o===""?"":`with ${...
L19: `),d=u-1;i=[...m.slice(0,d),"... (content truncated to fit terminal)"].join(`
...
L25: \r
L26: `),i=!1,a=!1,l;n.on("response",u=>{let{headers:p}=u;i=p["transfer-encoding"]==="chunked"&&!p["content-length"]}),n.on("socket",u=>{let p=()=>{if(i&&!a){let d=new Error("Premature c...
L27: \u{1F6A8} NexusHub Security Alert: Data Integrity Violation in file:
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/cli.cjs
HighChild Processdist/cli.cjs
HighSame File Env Network Executiondist/cli.cjs
HighCommand Output Exfiltrationdist/cli.cjs
HighRuntime Package Installdist/cli.cjs
HighShips High Entropy Blobdist/studio/assets/DC-KSUi6.woff2
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @nexushub/client@0.8.5.
See all versions of @nexushub/client for other recorded verdicts.
- Review the evidence and your use of @nexushub/client@0.8.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.