registry / @reason-machines/cli-linux-arm64-musl / 0.2.438

@reason-machines/cli-linux-arm64-musl@0.2.438

⚠ Under review

Reason CLI native binary for linux-arm64-musl

AI Security Review

scanned 4d ago · by lpm-firewall-ai

The inspected package source shows no lifecycle hook and no confirmed attack. The shipped native executable remains materially unresolved, so a source-based clean or malicious verdict is not supported.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Unresolved; the native executable may be run by its consumer, but the inspected analysis does not establish its activation paths.

Impact

The unresolved native behavior prevents a clean determination from static inspection.

Mechanism

The native artifact contains embedded source candidates, but the available analysis cannot trace their callers or fully determine executable behavior.

AI rationale

Evidence

.lpm-inspection-hUWWmu/0-ed92501c2c53.txtbin/reason

Decision evidence

public snapshot

AI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.

AI review observations

The shipped native executable has embedded source candidates, but the offline analysis cannot establish their reachability or rule out other behavior.
The manifest contains no lifecycle hook; it identifies this package as a Linux ARM64 musl native binary.
The sandbox runtime lists project configuration paths among its protected locations.
The bundled trace skill installer writes a skill into the current project’s Claude skills directory.

Evidence against

The trace skill write is project-local, and the inspected source does not establish that it runs during package installation.
The supplied native analysis is bounded and leaves material executable behavior unresolved.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

25 flagged

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{s.add(l),l.once("close",()=>s.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(s)=>{C(`Client request error: ${s.message}`,{level:"error"})}),i.on("error",(s)=>{C(`Client response error: ${s.message}`,{level:"er... L57: `)),e.end(cx(a))}function Tl(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function lx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(a)=>{e.off("data",s),clearTimeout(i),t(a)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{s.add(l),l.once("close",()=>s.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L55

47\r L48: Connection blocked by network allowlist`);return}if(a||i.destroyed){i.destroy();return}let R=_t(E)??E;if(e.mitmCA&&(e.shouldTerminateTLS?.(R,k)??!0)){i.write(`HTTP/1.1 200 Connecti... L49: \r ... L55: \r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(s)=>{C(`Client request error: ${s.message}`,{level:"error"})}),i.on("error",(s)=>{C(`Client response error: ${s.message}`,{level:"er... L57: `)),e.end(cx(a))}function Tl(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function lx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(a)=>{e.off("data",s),clearTimeout(i),t(a)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{s.add(l),l.once("close",()

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L47

bin/vm-hands/vm-hands-entry-lite-haehcqkg.jsView file

Lines 1-21javascript

1// @bun

2import{Ut,j}from"./vm-hands-entry-lite-1f2cam25.js";import{ue,Ce,Z,Ae,de,er,Ye,X,O,H,Qr}from"./vm-hands-entry-lite-r7zs4ce2.js";import{mo,qn}from"./vm-hands-entry-lite-hw26gewc.js";import{ao,P,Ge,ve,Ke,ne,Je,Mn,Se,Wt,ae,U,N,ce,Fr,jr,Bn}from"./vm-hands-entry-lite-3vmhs921.js";import{Pe,oe,pe,Y,Re,q,Q}

bin/vm-hands/vm-hands-entry-lite-ba3qq0bs.jsView file

Lines 1-21javascript

1// @bun

2import{ns}from"./vm-hands-entry-lite-07vak0wy.js";var Xr,Lo=Object.freeze({status:"aborted"});function z(e,r,a){function

bin/vm-hands/vm-hands-entry-lite-cmn9f6z2.jsView file

Lines 1-21javascript

1// @bun

2import{T}from"./vm-hands-entry-lite-fcvf8md1.js";import{g}from"./vm-hands-entry-lite-hw26gewc.js";import{zr,Hn,qr,zn}from"./vm-hands-entry-lite-3pnjdh8m.js";import{Jn,Xt,To}from"./vm-hands-entry-lite-385hpfd0.js";import{C}from

bin/vm-hands/index-0dp6x9h4.jsView file

1// @bun L2: import{sn}from"./vm-hands-entry-lite-9z3v15d2.js";import{Ti,he,e}from"./vm-hands-entry-lite-07vak0wy.js";var Ce=he(function(C6,ly){var __dirname="/[redacted]... L3: `)!=-1,y=this._styles,E=y.length;while(E--){var S=s[y[E]];if(g=S.open+g.replace(S.closeRe,S.open)+S.close,b)g=g.replace(a,function(x){return S.close+x+S.open})}return g}n.setTheme=... L4: `).join(` L5: `+_),p.push(w+"m+"+r.exports.humanize(this.diff)+"\x1B[0m")}else p[0]=a()+f+" "+p[0]}function a(){if(t.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function l(... L6: `)}function c(p){if(p)process.env.DEBUG=p;else delete process.env.DEBUG}function u(){return process.env.DEBUG}function d(p){p.inspectOpts={};let f=Object.keys(t.inspectOpts);for(le... ... L8: `:` L9: `,p=d.whitespace?" = ":"=",f=

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

bin/vm-hands/index-0dp6x9h4.jsView on unpkg · L1

239`,CHAR_NO_BREAK_SPACE:"\xA0",CHAR_PERCENT:"%",CHAR_PLUS:"+",CHAR_QUESTION_MARK:"?",CHAR_RIGHT_ANGLE_BRACKET:">",CHAR_RIGHT_CURLY_BRACE:"}",CHAR_RIGHT_SQUARE_BRACKET:"]",CHAR_SEMICO... L240: GFS4: `),console.error(g)};if(!n[l]){if(p=global[l]||[],d(n,p),n.close=function(g){function b(y,E){return g.call(n,y,function(S){if(!S)w();if(typeof E==="function")E.apply(this,arg... L241: `:""},this._extScope=D,this._scope=new n.Scope({parent:D}),this._nodes=[new v]}toString(){return this._root.render(this.opts)}name(D){return this._scope.name(D)}scopeName(D){return...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

bin/vm-hands/index-0dp6x9h4.jsView on unpkg · L239

bin/runtime/srt/vendor/seccomp/arm64/apply-seccompView file

•path = [redacted]-seccomp kind = native_binary sizeBytes = 603200 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/runtime/srt/vendor/seccomp/arm64/apply-seccompView on unpkg

bin/vm-hands/vm-hands-entry-lite-499mywh7.jsView file

•matchType = normalized_sha256 matchedPackage = @reason-machines/cli-linux-x64-musl@0.2.419 matchedPath = bin/vm-hands/vm-hands-entry-lite-beyyy1gz.js matchedIdentity = npm:[redacted]:0.2.419 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High