registry / @omega3_0/nanoagent / 1.1.0

@omega3_0/nanoagent@1.1.0

Ultra-lightweight, scalable CLI/TUI coding agent optimized for tiny local models & remote runtimes

AI Security Review

scanned 13d ago · by lpm-firewall-ai

npm installation can fetch and execute an unpinned remote shell script if Bun is unavailable. This creates install-time remote-code-execution supply-chain risk, though inspected code does not show package-directed data theft or AI-control-surface mutation.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install on a system without Bun

Impact

A changed or intercepted remote installer executes with the installing user's privileges.

Mechanism

postinstall downloads and pipes bun.sh installer to bash

Rationale

This is a real unsafe install hook, but the endpoint and behavior are consistent with installing the declared Bun runtime rather than a demonstrated malicious payload. Warn rather than block absent evidence of exfiltration, stealth persistence, or a foreign AI-agent control-surface change.

Evidence

package.jsonscripts/install-bun.mjsdist/main.jsdist/mcp/index.js

Network endpoints2

bun.sh/installbun.sh/install.ps1

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Critical Vulnerability with medium false-positive risk.

@omega3_0/nanoagent@1.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code