registry / @reason-machines/cli-linux-arm64-musl / 0.2.410
@reason-machines/cli-linux-arm64-musl@0.2.410
⚠ Under reviewReason CLI native binary for linux-arm64-musl
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe inspected manifest and JavaScript excerpts do not establish malicious behavior. Both shipped native executables remain materially unresolved, so the package cannot be cleared or blocked from the available source evidence.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Use of the packaged native executable; its actual behavior could not be determined from the bounded analysis.
Impact
The unresolved native behavior prevents a clean determination; no specific harmful effect was established.
Mechanism
The offline analysis provides embedded-source candidates for one executable but cannot establish its loader or other behavior; it cannot analyze the second executable’s format.
AI rationale
The inspected manifest and JavaScript excerpts do not establish malicious behavior. Both shipped native executables remain materially unresolved, so the package cannot be cleared or blocked from the available source evidence.
Evidence
.lpm-inspection-Uh4NPx/0-171b708829cb.txt.lpm-inspection-Uh4NPx/1-9ace43a76dab.txtbin/reasonbin/runtime/srt/vendor/seccomp/arm64/apply-seccomp
Decision evidence
public snapshotAI called this Manual Review at 91.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest lists package files and metadata but no lifecycle scripts.
- The runtime source identifies `.claude/commands` and `.claude/agents` among paths it handles.
- The bundled Playwright helper creates a `.claude/skills/playwright-trace` destination for a skill file.
- The offline analysis says bounded embedded-source windows cannot establish the native executable’s runtime behavior.
- The second native artifact is unrecognized by the offline analyzer, which says its behavior remains unresolved.
Evidence against
- The inspected manifest excerpt contains no lifecycle hook declaration.
- The inspected Playwright helper location is consistent with installing a trace skill, but does not establish package-wide behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
12 flagged · loading sourcebin/runtime/srt/sandbox-runtime.mjsView file
60mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*...
High
Child Process
Package source references child process execution.
bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L6055\r
L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er...
L57: `)),e.end(cx(s))}function Tl(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function lx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)...
...
L60: mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical10 High5 Medium4 Low
CriticalRemote Asset Decode Executebin/vm-hands/index-k8kcz8a3.js
HighChild Processbin/runtime/srt/sandbox-runtime.mjs
HighShell
HighEvalbin/vm-hands/index-k8kcz8a3.js
HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs
HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs
HighObfuscated Payload Loaderbin/vm-hands/index-k8kcz8a3.js
HighExternal Ai Agent Control Surface Mutationbin/vm-hands/index-k8kcz8a3.js
HighCross File Remote Execution Contextbin/vm-hands/index-k8kcz8a3.js
HighSemantic Analysis Limitedbin/vm-hands/index-k8kcz8a3.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @reason-machines/cli-linux-arm64-musl@0.2.410.
See all versions of @reason-machines/cli-linux-arm64-musl for other recorded verdicts.
- Review the evidence and your use of @reason-machines/cli-linux-arm64-musl@0.2.410 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.