registry / @reason-machines/cli-linux-arm64 / 0.2.386
@reason-machines/cli-linux-arm64@0.2.386
⚠ Under reviewReason CLI native binary for linux-arm64
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest identifies a native CLI package, and the bounded analysis is insufficient to establish the executable’s behavior or rule out other native behavior. No independent concrete attack was verified, so manual review is appropriate.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Unknown; the package includes a native CLI executable.
Impact
Potential effects cannot be determined from the bounded analysis.
Mechanism
The available analysis does not establish which embedded source is reachable or what other native behavior may exist.
AI rationale
The manifest identifies a native CLI package, and the bounded analysis is insufficient to establish the executable’s behavior or rule out other native behavior. No independent concrete attack was verified, so manual review is appropriate.
Evidence
.lpm-inspection-JWcxPJ/0-7cd9aae06067.txtbin/ara
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json identifies this package as the Linux ARM64 Reason CLI native binary.
- The offline analysis of bin/ara contains only bounded embedded source windows and says they do not establish loader reachability or rule out other native behavior.
- The embedded CLI text describes local login forwarding as a product feature, but this does not resolve all native binary behavior.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
24 flagged · loading sourcebin/runtime/srt/sandbox-runtime.mjsView file
60mux backend dial failed (${H})
L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=$6((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(...
L62: `).filter(Boolean);if(F===1)return[];throw Error(`ripgrep failed with exit code ${F}: ${q}`)}import{join as V0,dirname as T6}from"path";import{fileURLToPath as S6}from"url";import*...
High
Child Process
Package source references child process execution.
bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L6055\r
L56: `)}}),J.on("request",async(Q,Y)=>{Q.on("error",(G)=>{Z(`Client request error: ${G.message}`,{level:"error"})}),Y.on("error",(G)=>{Z(`Client response error: ${G.message}`,{level:"er...
L57: `)),$.end(eq(W))}function L7($){return Buffer.from([5,$,0,1,0,0,0,0,0,0])}function tq($){return new Promise((J)=>{let X=Buffer.alloc(0),Q=(W)=>{$.off("data",G),clearTimeout(Y),J(W)...
...
L60: mux backend dial failed (${H})
L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=$6((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(...
L62: `).filter(Boolean);if(F===1)return[];throw Error(`ripgrep failed with exit code ${F}: ${q}`)}import{join as V0,dirname as T6}from"path";import{fileURLToPath as S6}from"url";import*
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical21 High5 Medium4 Low
CriticalRemote Asset Decode Executebin/vm-hands/index-7f2kwwen.js
HighChild Processbin/runtime/srt/sandbox-runtime.mjs
HighShellbin/vm-hands/vm-hands-entry-lite-jcnrgmtk.js
HighEvalbin/vm-hands/vm-hands-entry-lite-zjfr0zh8.js
HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs
HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs
HighObfuscated Payload Loaderbin/vm-hands/index-7f2kwwen.js
HighExternal Ai Agent Control Surface Mutationbin/vm-hands/index-7f2kwwen.js
HighCross File Remote Execution Contextbin/vm-hands/vm-hands-entry-lite-98y68ymk.js
HighSemantic Analysis Limitedbin/vm-hands/index-7f2kwwen.js
Affected versions and remediation
This report applies to @reason-machines/cli-linux-arm64@0.2.386.
See all versions of @reason-machines/cli-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @reason-machines/cli-linux-arm64@0.2.386 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.