@reason-machines/cli-darwin-x64@0.2.530: Manual Review npm

AI Security Review

scanned 11h ago · by lpm-firewall-ai

The manifest has no install lifecycle scripts, and the inspected evidence does not establish an attack. The bundled native executable’s behavior is not fully resolved by its bounded analysis, so manual review is appropriate.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Running the packaged CLI executable.

Impact

No specific harmful effect was verified; native executable behavior remains unresolved.

Mechanism

The available analysis does not establish executable behavior or reachability beyond the inspected source windows.

AI rationale

The manifest has no install lifecycle scripts, and the inspected evidence does not establish an attack. The bundled native executable’s behavior is not fully resolved by its bounded analysis, so manual review is appropriate.

Evidence

.lpm-inspection-5gtLTF/0-1ba796d2fbaf.txtbin/reason

Decision evidence

public snapshot

AI called this Manual Review at 91.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json identifies a macOS x64 CLI package and defines no lifecycle scripts.
The verified offline analysis identifies bin/reason as a 78 MB Mach-O executable but contains only bounded embedded-source candidates.
The offline analysis states that its bounded windows cannot establish code reachability or rule out other native behavior.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 1 file(s), 524 KB of source, external domains: 127.0.0.1

Source & flagged code

6 flagged

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L55

47\r L48: Connection blocked by network allowlist`);return}if(s||i.destroyed){i.destroy();return}let R=_t(E)??E;if(e.mitmCA&&(e.shouldTerminateTLS?.(R,k)??!0)){i.write(`HTTP/1.1 200 Connecti... L49: \r ... L55: \r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L47

•matchType = normalized_sha256 matchedPackage = @reason-machines/cli-linux-arm64-musl@0.2.529 matchedPath = bin/runtime/srt/sandbox-runtime.mjs matchedIdentity = npm:[redacted]:0.2.529 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg

bin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentityView file

•path = bin/Background/Reason.[redacted] kind = native_binary sizeBytes = 34896 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentityView on unpkg

package.jsonView file

1{ "name": "@reason-machines/cli-darwin-x64", "version": "0.2.530", "description": "Reason CLI native binary for darwin-x64", "os": [ "darwin" ], "cpu": [ "x64" ], "files": [ "bin", "README.md", "LICENSE", "THIRD_PARTY_NOTICES.txt" ], "publishConfig": { "access": "public", "provenance": false }, "repository": { "type": "git", "url": "git+https://github.com/reason-machines/monorepo.git" }, "homepage": "https://reasonmachines.com", "bugs": { "email": "contact@reasonmachines.com" }, "license": "SEE LICENSE IN LICENSE" }

Low

Suspicious Lifecycle Evidence

package.json identifies a macOS x64 CLI package and defines no lifecycle scripts.

package.jsonView on unpkg · L1

Source & flagged code

6 flagged · loading source

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er... L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

Findings

4 High3 Medium5 Low

HighChild Processbin/runtime/srt/sandbox-runtime.mjs

HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs

HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs

HighKnown Malware Source Similaritybin/runtime/srt/sandbox-runtime.mjs

MediumEnvironment Vars

MediumShips Native Binarybin/Background/Reason.app/Contents/MacOS/ReasonBackgroundIdentity

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @reason-machines

Behavioral surface

Related packages

More from @reason-machines

Source & flagged code