registry / @reason-machines/cli-linux-x64-musl / 0.2.416
@reason-machines/cli-linux-x64-musl@0.2.416
⚠ Under reviewReason CLI native binary for linux-x64-musl
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no lifecycle hook, but the package ships an 84 MB native executable whose analysis is explicitly limited and cannot establish its behavior. No concrete attack was verified, so manual review is appropriate.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The package's native executable is the declared platform artifact; its runtime behavior was not resolved by the available offline analysis.
Impact
The unresolved native behavior prevents a reliable clean or malicious determination.
Mechanism
The analysis covers bounded embedded source windows only and does not establish the executable's complete behavior or loader reachability.
AI rationale
The manifest has no lifecycle hook, but the package ships an 84 MB native executable whose analysis is explicitly limited and cannot establish its behavior. No concrete attack was verified, so manual review is appropriate.
Evidence
.lpm-inspection-LJdK3q/0-8c4781c666ec.txtbin/reason
Decision evidence
public snapshotAI called this Manual Review at 96.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json contains package metadata and platform restrictions, with no lifecycle scripts or JavaScript entrypoint declared.
- The native executable analysis is limited to embedded source windows and cannot establish its full behavior or activation.
- The sandbox runtime names agent command and agent directories among paths it protects.
- The bundled Playwright code contains a function that copies a trace skill into the current project's .claude/skills directory; its caller was not established.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
12 flagged · loading sourcebin/runtime/srt/sandbox-runtime.mjsView file
60mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*...
High
Child Process
Package source references child process execution.
bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L6055\r
L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er...
L57: `)),e.end(cx(s))}function Tl(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function lx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)...
...
L60: mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical10 High5 Medium4 Low
CriticalRemote Asset Decode Executebin/vm-hands/index-k8kcz8a3.js
HighChild Processbin/runtime/srt/sandbox-runtime.mjs
HighShell
HighEvalbin/vm-hands/index-k8kcz8a3.js
HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs
HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs
HighObfuscated Payload Loaderbin/vm-hands/index-k8kcz8a3.js
HighExternal Ai Agent Control Surface Mutationbin/vm-hands/index-k8kcz8a3.js
HighCross File Remote Execution Contextbin/vm-hands/index-k8kcz8a3.js
HighSemantic Analysis Limitedbin/vm-hands/index-k8kcz8a3.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @reason-machines/cli-linux-x64-musl@0.2.416.
See all versions of @reason-machines/cli-linux-x64-musl for other recorded verdicts.
- Review the evidence and your use of @reason-machines/cli-linux-x64-musl@0.2.416 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.