@reason-machines/cli-darwin-x64@0.2.406: Manual Review npm

AI Security Review

scanned 4d ago · by lpm-firewall-ai

The manifest has no install lifecycle scripts, but the shipped native executable has material unresolved behavior: a bounded embedded-source candidate collects local credentials, while the analysis cannot establish reachability or rule out other native behavior. The evidence does not confirm an attack, so manual review is appropriate.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Unknown; the candidate is embedded in the native CLI, but its activation path was not established.

Impact

Potential credential exposure remains unresolved; no confirmed attack impact was established.

Mechanism

The candidate reads local provider credentials and collects API keys; the inspected excerpt does not show a transfer destination or send operation.

AI rationale

The manifest has no install lifecycle scripts, but the shipped native executable has material unresolved behavior: a bounded embedded-source candidate collects local credentials, while the analysis cannot establish reachability or rule out other native behavior. The evidence does not confirm an attack, so manual review is appropriate.

Evidence

.lpm-inspection-oA5dSd/0-c110a36a5718.txtbin/runtime/srt/sandbox-runtime.mjs

Decision evidence

public snapshot

AI called this Manual Review at 88.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest identifies this as a Darwin x64 native CLI package and declares no lifecycle scripts.
The executable analysis is explicitly limited and says its embedded source windows cannot establish loader reachability or rule out other native behavior.
One embedded source candidate gathers local API keys and credentials for several providers; the inspected excerpt does not establish where those values go or whether this code runs.

Evidence against

The inspected runtime bundle location only lists configuration paths; it does not show a configuration write or an attack.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 1 file(s), 526 KB of source, external domains: 127.0.0.1

Source & flagged code

6 flagged

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${q}) L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=OH((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(... L62: `).filter(Boolean);if(N===1)return[];throw Error(`ripgrep failed with exit code ${N}: ${H}`)}import{join as V0,dirname as kH}from"path";import{fileURLToPath as fH}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),J.on("request",async(Q,Y)=>{Q.on("error",(G)=>{Z(`Client request error: ${G.message}`,{level:"error"})}),Y.on("error",(G)=>{Z(`Client response error: ${G.message}`,{level:"er... L57: `)),$.end(MH(W))}function Z7($){return Buffer.from([5,$,0,1,0,0,0,0,0,0])}function UH($){return new Promise((J)=>{let X=Buffer.alloc(0),Q=(W)=>{$.off("data",G),clearTimeout(Y),J(W)... ... L60: mux backend dial failed (${q}) L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=OH((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(... L62: `).filter(Boolean);if(N===1)return[];throw Error(`ripgrep failed with exit code ${N}: ${H}`)}import{join as V0,dirname as kH}from"path";import{fileURLToPath as fH}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L55

47\r L48: Connection blocked by network allowlist`);return}if(W||Y.destroyed){Y.destroy();return}let P=jJ(B)??B;if($.mitmCA&&($.shouldTerminateTLS?.(P,C)??!0)){Y.write(`HTTP/1.1 200 Connecti... L49: \r ... L55: \r L56: `)}}),J.on("request",async(Q,Y)=>{Q.on("error",(G)=>{Z(`Client request error: ${G.message}`,{level:"error"})}),Y.on("error",(G)=>{Z(`Client response error: ${G.message}`,{level:"er... L57: `)),$.end(MH(W))}function Z7($){return Buffer.from([5,$,0,1,0,0,0,0,0,0])}function UH($){return new Promise((J)=>{let X=Buffer.alloc(0),Q=(W)=>{$.off("data",G),clearTimeout(Y),J(W)... ... L60: mux backend dial failed (${q}) L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=OH((M)=>{G.add(M),M.once("close",()

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L47

•matchType = normalized_sha256 matchedPackage = @reason-machines/cli-linux-x64-musl@0.2.407 matchedPath = bin/runtime/srt/sandbox-runtime.mjs matchedIdentity = npm:[redacted]:0.2.407 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg

bin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentityView file

•path = bin/Background/Reason.[redacted] kind = native_binary sizeBytes = 34896 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentityView on unpkg

package.jsonView file

1{ "name": "@reason-machines/cli-darwin-x64", "version": "0.2.406", "description": "Reason CLI native binary for darwin-x64", "os": [ "darwin" ], "cpu": [ "x64" ], "files": [

Low

Suspicious Lifecycle Evidence

The manifest identifies this as a Darwin x64 native CLI package and declares no lifecycle scripts.

package.jsonView on unpkg · L1

Source & flagged code

6 flagged · loading source

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${q}) L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=OH((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(... L62: `).filter(Boolean);if(N===1)return[];throw Error(`ripgrep failed with exit code ${N}: ${H}`)}import{join as V0,dirname as kH}from"path";import{fileURLToPath as fH}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),J.on("request",async(Q,Y)=>{Q.on("error",(G)=>{Z(`Client request error: ${G.message}`,{level:"error"})}),Y.on("error",(G)=>{Z(`Client response error: ${G.message}`,{level:"er... L57: `)),$.end(MH(W))}function Z7($){return Buffer.from([5,$,0,1,0,0,0,0,0,0])}function UH($){return new Promise((J)=>{let X=Buffer.alloc(0),Q=(W)=>{$.off("data",G),clearTimeout(Y),J(W)... ... L60: mux backend dial failed (${q}) L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=OH((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(... L62: `).filter(Boolean);if(N===1)return[];throw Error(`ripgrep failed with exit code ${N}: ${H}`)}import{join as V0,dirname as kH}from"path";import{fileURLToPath as fH}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

Findings

4 High3 Medium5 Low

HighChild Processbin/runtime/srt/sandbox-runtime.mjs

HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs

HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs

HighKnown Malware Source Similaritybin/runtime/srt/sandbox-runtime.mjs

MediumEnvironment Vars

MediumShips Native Binarybin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentity

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @reason-machines

Behavioral surface

Related packages

More from @reason-machines

Source & flagged code