registry / @reason-machines/cli-darwin-x64 / 0.2.401
@reason-machines/cli-darwin-x64@0.2.401
⚠ Under reviewReason CLI native binary for darwin-x64
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe inspected JavaScript target is benign search-exclusion logic, and the manifest has no install hook. Native executable behavior remains materially unresolved, so manual review is warranted without treating scanner similarity or credential-reading candidates alone as proof of an attack.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Unresolved; the embedded source does not establish the activating action.
Impact
Potential exposure of local credentials cannot be assessed from the available artifact analysis.
Mechanism
Unresolved native behavior; embedded candidates include local credential reads, but reachability and any transfer are not established.
AI rationale
The inspected JavaScript target is benign search-exclusion logic, and the manifest has no install hook. Native executable behavior remains materially unresolved, so manual review is warranted without treating scanner similarity or credential-reading candidates alone as proof of an attack.
Evidence
.lpm-inspection-zjBN9p/0-a67a4af1eb9a.txt.lpm-inspection-zjBN9p/1-6c79cb6bbe2e.txt.lpm-inspection-zjBN9p/2-8ceff216cb96.txt.lpm-inspection-zjBN9p/3-909dfdce71e7.txt
Decision evidence
public snapshotAI called this Manual Review at 86.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest identifies a Darwin x64 CLI binary package and contains no lifecycle scripts or JavaScript entrypoint fields.
- The flagged agent-related code lists protected paths; its caller builds file-search exclusion globs rather than writing agent settings.
- An embedded source candidate reads local agent credentials, but the analysis says its bounded windows cannot establish reachability or rule out other native behavior.
- The packaged background executables and keychain library have unsupported analysis, so their behavior remains unresolved.
Evidence against
- The manifest shows no install hook or JavaScript entrypoint.
- The flagged agent-related source implements search exclusions, not agent configuration changes.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcebin/runtime/srt/sandbox-runtime.mjsView file
60mux backend dial failed (${q})
L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=UH((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(...
L62: `).filter(Boolean);if(N===1)return[];throw Error(`ripgrep failed with exit code ${N}: ${H}`)}import{join as V0,dirname as xH}from"path";import{fileURLToPath as vH}from"url";import*...
High
Child Process
Package source references child process execution.
bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L6055\r
L56: `)}}),J.on("request",async(Q,Y)=>{Q.on("error",(G)=>{Z(`Client request error: ${G.message}`,{level:"error"})}),Y.on("error",(G)=>{Z(`Client response error: ${G.message}`,{level:"er...
L57: `)),$.end(WH(W))}function D7($){return Buffer.from([5,$,0,1,0,0,0,0,0,0])}function GH($){return new Promise((J)=>{let X=Buffer.alloc(0),Q=(W)=>{$.off("data",G),clearTimeout(Y),J(W)...
...
L60: mux backend dial failed (${q})
L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=UH((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(...
L62: `).filter(Boolean);if(N===1)return[];throw Error(`ripgrep failed with exit code ${N}: ${H}`)}import{join as V0,dirname as xH}from"path";import{fileURLToPath as vH}from"url";import*
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
5 High3 Medium4 Low
HighChild Processbin/runtime/srt/sandbox-runtime.mjs
HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs
HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs
HighKnown Malware Source Similaritybin/runtime/srt/sandbox-runtime.mjs
HighKnown Malware Source Fingerprint Signaturebin/runtime/srt/sandbox-runtime.mjs
MediumEnvironment Vars
MediumShips Native Binarybin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentity
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @reason-machines/cli-darwin-x64@0.2.401.
See all versions of @reason-machines/cli-darwin-x64 for other recorded verdicts.
- Review the evidence and your use of @reason-machines/cli-darwin-x64@0.2.401 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.