registry / @reason-machines/cli-linux-x64-musl / 0.2.412
@reason-machines/cli-linux-x64-musl@0.2.412
⚠ Under reviewReason CLI native binary for linux-x64-musl
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe inspected JavaScript excerpts show sandbox path handling and a local trace-skill copy, while the manifest declares no lifecycle scripts. Native executable behavior remains materially unresolved, so the available source evidence does not support a clean or malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Execution of the package’s native executable; its relevant behavior could not be resolved from the inspected analysis.
Impact
A malicious native behavior cannot be confirmed or ruled out from this inspection.
Mechanism
The inspected native analysis contains bounded embedded-source windows and states that it cannot establish loader reachability or exclude other native behavior.
AI rationale
The inspected JavaScript excerpts show sandbox path handling and a local trace-skill copy, while the manifest declares no lifecycle scripts. Native executable behavior remains materially unresolved, so the available source evidence does not support a clean or malicious verdict.
Evidence
.lpm-inspection-MFu68F/0-345026522a92.txtbin/reasonbin/runtime/srt/sandbox-runtime.mjsbin/vm-hands/index-k8kcz8a3.js
Decision evidence
public snapshotAI called this Manual Review at 91.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest contains package metadata and a file list, with no declared lifecycle scripts or JavaScript entrypoints.
- The sandbox runtime excerpt defines protected paths, including Claude command and agent directories.
- The bundled JavaScript includes a local operation that copies a trace skill into the current project’s .claude/skills directory.
- Offline analysis of bin/reason is limited and does not establish loader reachability or rule out other native behavior.
Evidence against
- The inspected skill-copy code performs a local file copy; the excerpt does not show credential collection, network transfer, or an install-time trigger.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
12 flagged · loading sourcebin/runtime/srt/sandbox-runtime.mjsView file
60mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*...
High
Child Process
Package source references child process execution.
bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L6055\r
L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er...
L57: `)),e.end(cx(s))}function Tl(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function lx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)...
...
L60: mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical10 High5 Medium4 Low
CriticalRemote Asset Decode Executebin/vm-hands/index-k8kcz8a3.js
HighChild Processbin/runtime/srt/sandbox-runtime.mjs
HighShell
HighEvalbin/vm-hands/index-k8kcz8a3.js
HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs
HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs
HighObfuscated Payload Loaderbin/vm-hands/index-k8kcz8a3.js
HighExternal Ai Agent Control Surface Mutationbin/vm-hands/index-k8kcz8a3.js
HighCross File Remote Execution Contextbin/vm-hands/index-k8kcz8a3.js
HighSemantic Analysis Limitedbin/vm-hands/index-k8kcz8a3.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @reason-machines/cli-linux-x64-musl@0.2.412.
See all versions of @reason-machines/cli-linux-x64-musl for other recorded verdicts.
- Review the evidence and your use of @reason-machines/cli-linux-x64-musl@0.2.412 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.