@reason-machines/cli-darwin-x64@0.2.513: Manual Review npm

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The manifest has no lifecycle scripts, and the inspected JavaScript findings do not establish an attack. The required native executable analysis is limited and explicitly cannot rule out other behavior, so manual review is warranted.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Running the bundled bin/reason executable.

Impact

No concrete malicious impact was verified; behavior of the native CLI remains unknown.

Mechanism

The offline analysis cannot establish whether the extracted source is reachable or exclude other native behavior.

AI rationale

The manifest has no lifecycle scripts, and the inspected JavaScript findings do not establish an attack. The required native executable analysis is limited and explicitly cannot rule out other behavior, so manual review is warranted.

Evidence

bin/reason.lpm-inspection-XPWkRz/0-cea0a24f929a.txt

Decision evidence

public snapshot

AI called this Manual Review at 94.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json identifies a Darwin x64 CLI and contains no lifecycle scripts.
The trusted analysis identifies bin/reason as a 78 MB Mach-O Bun executable and says its bounded source windows cannot establish code reachability or rule out other native behavior.

Evidence against

No concrete attack behavior was established from the inspected source.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 1 file(s), 524 KB of source, external domains: 127.0.0.1

Source & flagged code

6 flagged

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L55

47\r L48: Connection blocked by network allowlist`);return}if(s||i.destroyed){i.destroy();return}let R=_t(E)??E;if(e.mitmCA&&(e.shouldTerminateTLS?.(R,k)??!0)){i.write(`HTTP/1.1 200 Connecti... L49: \r ... L55: \r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L47

•matchType = normalized_sha256 matchedPackage = @reason-machines/cli-linux-arm64@0.2.506 matchedPath = bin/runtime/srt/sandbox-runtime.mjs matchedIdentity = npm:[redacted]:0.2.506 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg

bin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentityView file

•path = bin/Background/Reason.[redacted] kind = native_binary sizeBytes = 34896 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentityView on unpkg

package.jsonView file

1{ "name": "@reason-machines/cli-darwin-x64", "version": "0.2.513", "description": "Reason CLI native binary for darwin-x64", "os": [ "darwin" ], "cpu": [ "x64" ], "files": [ "bin", "README.md", "LICENSE", "THIRD_PARTY_NOTICES.txt" ], "publishConfig": { "access": "public", "provenance": false }, "repository": { "type": "git", "url": "git+https://github.com/reason-machines/monorepo.git" }, "homepage": "https://reasonmachines.com", "bugs": { "email": "contact@reasonmachines.com" }, "license": "SEE LICENSE IN LICENSE" }

Low

Suspicious Lifecycle Evidence

package.json identifies a Darwin x64 CLI and contains no lifecycle scripts.

package.jsonView on unpkg · L1

Source & flagged code

6 flagged · loading source

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

Findings

4 High3 Medium5 Low

HighChild Processbin/runtime/srt/sandbox-runtime.mjs

HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs

HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs

HighKnown Malware Source Similaritybin/runtime/srt/sandbox-runtime.mjs

MediumEnvironment Vars

MediumShips Native Binarybin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentity

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @reason-machines

Behavioral surface

Related packages

More from @reason-machines

Source & flagged code