registry / @reason-machines/cli-linux-x64 / 0.2.428

@reason-machines/cli-linux-x64@0.2.428

⚠ Under review

Reason CLI native binary for linux-x64

AI Security Review

scanned 4d ago · by lpm-firewall-ai

The source reviewed does not establish malicious behavior, and the trace skill setup is an explicit local CLI action. The primary native executable remains materially unresolved, so a verdict cannot be made from the bounded offline analysis.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Unknown; the native executable's activation and behavior were not established by the bounded analysis.

Impact

Potential effects of the unresolved executable cannot be determined from the available analysis.

Mechanism

The available report contains embedded-source candidates but does not establish which code is reachable or whether other native behavior exists.

AI rationale

Evidence

bin/reason.lpm-inspection-ahnujH/0-8dc65abcfca7.txt

Decision evidence

public snapshot

AI called this Manual Review at 88.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest identifies this as a Linux x64 native-binary package.
The offline report identifies bin/reason as a 90 MB ELF executable, but contains only bounded embedded-source windows that cannot establish its behavior or rule out other native behavior.
The bundled trace skill installer copies a local skill into the project only through the explicit trace install-skill command; this is not evidence of an attack.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 81 file(s), 5.07 MB of source, external domains: 127.0.0.1, api-staging.ara.so, api.ara.so, api.github.com, api.reasonmachines.ai, api.reasonmachines.com, camo.githubusercontent.com, cdn.playwright.dev, chromewebstore.google.com, claude.ai, cursor.com, dotenvx.com, dummy.test, edgeupdates.microsoft.com, example.com, ffmpeg.martin-riedl.de, git-scm.com, github.com, github.com.helper, json-schema.org, mcp.reasonmachines.com, nodejs.org, openbox.org, playwright.bloburl, playwright.dev, playwright.download.prss.microsoft.com, proxy.example.com, raw.githubusercontent.com, reasonmachines.ai, reasonmachines.com, registry.npmjs.org, schemas.microsoft.com, staging-api.reasonmachines.ai, staging-api.reasonmachines.com, staging.reasonmachines.ai, storage.googleapis.com, support.microsoft.com, www.apple.com, www.w3.org

Source & flagged code

24 flagged

bin/runtime/srt/sandbox-runtime.mjsView file

60mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{s.add(l),l.once("close",()=>s.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*...

High

Child Process

Package source references child process execution.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L60

55\r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(s)=>{C(`Client request error: ${s.message}`,{level:"error"})}),i.on("error",(s)=>{C(`Client response error: ${s.message}`,{level:"er... L57: `)),e.end(cx(a))}function Tl(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function lx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(a)=>{e.off("data",s),clearTimeout(i),t(a)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{s.add(l),l.once("close",()=>s.delete(l)),l.on(... L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as ur,dirname as Lx}from"path";import{fileURLToPath as Ox}from"url";import*

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L55

47\r L48: Connection blocked by network allowlist`);return}if(a||i.destroyed){i.destroy();return}let R=_t(E)??E;if(e.mitmCA&&(e.shouldTerminateTLS?.(R,k)??!0)){i.write(`HTTP/1.1 200 Connecti... L49: \r ... L55: \r L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(s)=>{C(`Client request error: ${s.message}`,{level:"error"})}),i.on("error",(s)=>{C(`Client response error: ${s.message}`,{level:"er... L57: `)),e.end(cx(a))}function Tl(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function lx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(a)=>{e.off("data",s),clearTimeout(i),t(a)... ... L60: mux backend dial failed (${d}) L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=ux((l)=>{s.add(l),l.once("close",()

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L47

bin/vm-hands/vm-hands-entry-lite-ba3qq0bs.jsView file

Lines 1-21javascript

1// @bun

2import{ns}from"./vm-hands-entry-lite-07vak0wy.js";var Xr,Lo=Object.freeze({status:"aborted"});function z(e,r,a){function

bin/vm-hands/vm-hands-entry-lite-njs8k65s.jsView file

Lines 1-8javascript

1// @bun

2import{It}from"./vm-hands-entry-lite-2yz6b0n3.js";import{fe,se,C}from"./vm-hands-entry-lite-8j7p91hr.js";import{r}from"./vm-hands-entry-lite-qy9xg6em.js";import{spawn as J,spawnSync as ee}from"child_process";

bin/vm-hands/vm-hands-entry-lite-188vta3r.jsView file

Lines 1-21javascript

1// @bun

2import{T}from"./vm-hands-entry-lite-fcvf8md1.js";import{g}from"./vm-hands-entry-lite-hw26gewc.js";import{zr,Hn,qr,zn}from"./vm-hands-entry-lite-3pnjdh8m.js";import{Jn,Xt,To}from"./vm-hands-entry-lite-72wj76dq.js";import{C}from"./vm-hands-entry-lite-8j7p91hr.js"

bin/vm-hands/index-0dp6x9h4.jsView file

1// @bun L2: import{sn}from"./vm-hands-entry-lite-9z3v15d2.js";import{Ti,he,e}from"./vm-hands-entry-lite-07vak0wy.js";var Ce=he(function(C6,ly){var __dirname="/[redacted]... L3: `)!=-1,y=this._styles,E=y.length;while(E--){var S=s[y[E]];if(g=S.open+g.replace(S.closeRe,S.open)+S.close,b)g=g.replace(a,function(x){return S.close+x+S.open})}return g}n.setTheme=... L4: `).join(` L5: `+_),p.push(w+"m+"+r.exports.humanize(this.diff)+"\x1B[0m")}else p[0]=a()+f+" "+p[0]}function a(){if(t.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function l(... L6: `)}function c(p){if(p)process.env.DEBUG=p;else delete process.env.DEBUG}function u(){return process.env.DEBUG}function d(p){p.inspectOpts={};let f=Object.keys(t.inspectOpts);for(le... ... L8: `:` L9: `,p=d.whitespace?" = ":"=",f=

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

bin/vm-hands/index-0dp6x9h4.jsView on unpkg · L1

239`,CHAR_NO_BREAK_SPACE:"\xA0",CHAR_PERCENT:"%",CHAR_PLUS:"+",CHAR_QUESTION_MARK:"?",CHAR_RIGHT_ANGLE_BRACKET:">",CHAR_RIGHT_CURLY_BRACE:"}",CHAR_RIGHT_SQUARE_BRACKET:"]",CHAR_SEMICO... L240: GFS4: `),console.error(g)};if(!n[l]){if(p=global[l]||[],d(n,p),n.close=function(g){function b(y,E){return g.call(n,y,function(S){if(!S)w();if(typeof E==="function")E.apply(this,arg... L241: `:""},this._extScope=D,this._scope=new n.Scope({parent:D}),this._nodes=[new v]}toString(){return this._root.render(this.opts)}name(D){return this._scope.name(D)}scopeName(D){return...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

bin/vm-hands/index-0dp6x9h4.jsView on unpkg · L239

bin/runtime/srt/vendor/seccomp/x64/apply-seccompView file

•path = [redacted]-seccomp kind = native_binary sizeBytes = 755720 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/runtime/srt/vendor/seccomp/x64/apply-seccompView on unpkg

bin/vm-hands/vm-hands-entry-lite-499mywh7.jsView file

•matchType = normalized_sha256 matchedPackage = @reason-machines/cli-linux-x64-musl@0.2.419 matchedPath = bin/vm-hands/vm-hands-entry-lite-beyyy1gz.js matchedIdentity = npm:[redacted]:0.2.419 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High