registry / @reason-machines/cli-linux-arm64 / 0.2.416
@reason-machines/cli-linux-arm64@0.2.416
⚠ Under reviewReason CLI native binary for linux-arm64
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package has no install hook, and the bundle’s agent-skill write is behind an explicit command. The native executable’s partial embedded-source analysis shows API-key collection but cannot establish reachability or transfer behavior, so its security impact remains unresolved.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Unknown; the native executable’s relevant code path could not be traced from the available analysis.
Impact
Potential exposure of service API keys cannot be confirmed without tracing whether the routine runs and where its results go.
Mechanism
An embedded routine reads API keys from environment variables and local agent configuration; its reachability and subsequent handling remain unresolved.
AI rationale
The package has no install hook, and the bundle’s agent-skill write is behind an explicit command. The native executable’s partial embedded-source analysis shows API-key collection but cannot establish reachability or transfer behavior, so its security impact remains unresolved.
Evidence
bin/reason.lpm-inspection-upX0nz/0-5cf29b5dda64.txt
Decision evidence
public snapshotAI called this Manual Review at 52.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package manifest identifies a Linux ARM64 CLI and has no lifecycle script.
- The Playwright bundle writes a packaged skill under the current directory’s .claude folder only through an explicit install-skill command.
- A native executable’s embedded source includes a routine that collects API keys from environment variables and local agent configuration.
- The available native analysis is bounded and cannot establish whether the embedded routine is reachable or whether it sends collected values.
Evidence against
- The bundle’s skill installation is explicitly invoked and copies a packaged file.
- The manifest contains no install-time lifecycle hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
12 flagged · loading sourcebin/runtime/srt/sandbox-runtime.mjsView file
60mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*...
High
Child Process
Package source references child process execution.
bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L6055\r
L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er...
L57: `)),e.end(cx(s))}function Tl(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function lx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)...
...
L60: mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical10 High5 Medium4 Low
CriticalRemote Asset Decode Executebin/vm-hands/index-k8kcz8a3.js
HighChild Processbin/runtime/srt/sandbox-runtime.mjs
HighShell
HighEvalbin/vm-hands/index-k8kcz8a3.js
HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs
HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs
HighObfuscated Payload Loaderbin/vm-hands/index-k8kcz8a3.js
HighExternal Ai Agent Control Surface Mutationbin/vm-hands/index-k8kcz8a3.js
HighCross File Remote Execution Contextbin/vm-hands/index-k8kcz8a3.js
HighSemantic Analysis Limitedbin/vm-hands/index-k8kcz8a3.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @reason-machines/cli-linux-arm64@0.2.416.
See all versions of @reason-machines/cli-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @reason-machines/cli-linux-arm64@0.2.416 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.