@reason-machines/cli-darwin-x64@0.2.517: Manual Review npm

AI Security Review

scanned 23h ago · by lpm-firewall-ai

The manifest shows no install hook or JavaScript entrypoint, but the shipped native executable is only partially analyzed. Its remaining behavior cannot be resolved from the inspected source evidence, so manual review is warranted.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Launching bin/reason may activate native behavior that the inspected windows do not resolve.

Impact

Unresolved; the inspected evidence does not establish an attack or its effects.

Mechanism

The analysis exposes embedded source candidates, including child-process and filesystem use, without establishing their reachability or the executable’s other behavior.

AI rationale

The manifest shows no install hook or JavaScript entrypoint, but the shipped native executable is only partially analyzed. Its remaining behavior cannot be resolved from the inspected source evidence, so manual review is warranted.

Evidence

.lpm-inspection-TyMT6W/0-01c6e562305b.txtbin/reason

Decision evidence

public snapshot

AI called this Manual Review at 98.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest identifies a Darwin x64 native-binary package and contains no lifecycle scripts or JavaScript entrypoint.
The hash-verified analysis covers embedded source windows only and says they cannot establish reachability or rule out other native behavior.
An embedded source candidate imports child-process and filesystem APIs, but the available analysis does not establish how that code is activated or what it does.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 1 file(s), 524 KB of source, external domains: 127.0.0.1

Source & flagged code

6 flagged

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L55

47\r L48: Connection blocked by network allowlist`);return}if(s||i.destroyed){i.destroy();return}let R=_t(E)??E;if(e.mitmCA&&(e.shouldTerminateTLS?.(R,k)??!0)){i.write(`HTTP/1.1 200 Connecti... L49: \r ... L55: \r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L47

•matchType = normalized_sha256 matchedPackage = @reason-machines/cli-linux-arm64@0.2.506 matchedPath = bin/runtime/srt/sandbox-runtime.mjs matchedIdentity = npm:[redacted]:0.2.506 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg

bin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentityView file

•path = bin/Background/Reason.[redacted] kind = native_binary sizeBytes = 34896 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentityView on unpkg

package.jsonView file

1{ "name": "@reason-machines/cli-darwin-x64", "version": "0.2.517", "description": "Reason CLI native binary for darwin-x64", "os": [ "darwin" ], "cpu": [ "x64" ], "files": [ "bin", "README.md", "LICENSE", "THIRD_PARTY_NOTICES.txt" ], "publishConfig": { "access": "public", "provenance": false }, "repository": { "type": "git", "url": "git+https://github.com/reason-machines/monorepo.git" }, "homepage": "https://reasonmachines.com", "bugs": { "email": "contact@reasonmachines.com" }, "license": "SEE LICENSE IN LICENSE" }

Low

Suspicious Lifecycle Evidence

The manifest identifies a Darwin x64 native-binary package and contains no lifecycle scripts or JavaScript entrypoint.

package.jsonView on unpkg · L1

Source & flagged code

6 flagged · loading source

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

Findings

4 High3 Medium5 Low

HighChild Processbin/runtime/srt/sandbox-runtime.mjs

HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs

HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs

HighKnown Malware Source Similaritybin/runtime/srt/sandbox-runtime.mjs

MediumEnvironment Vars

MediumShips Native Binarybin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentity

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @reason-machines

Behavioral surface

Related packages

More from @reason-machines

Source & flagged code