registry / @reason-machines/cli-win32-arm64 / 0.2.394
@reason-machines/cli-win32-arm64@0.2.394
⚠ Under reviewReason CLI native binary for win32-arm64
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no lifecycle hook, and the inspected runtime location does not prove harmful agent configuration behavior. The required executable analysis is bounded and leaves activation and credential handling unresolved, so manual review is appropriate.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
The executable’s activating path is unresolved in the available static analysis.
Impact
Whether the values leave the machine or are used only for a local feature remains unresolved.
Mechanism
A helper in an embedded-source candidate collects API-key values from environment variables; the inspected excerpt does not establish a send operation.
AI rationale
The manifest has no lifecycle hook, and the inspected runtime location does not prove harmful agent configuration behavior. The required executable analysis is bounded and leaves activation and credential handling unresolved, so manual review is appropriate.
Evidence
.lpm-inspection-ehPxYq/0-46ddd067a712.txtbin/reason.exe
Decision evidence
public snapshotAI called this Manual Review at 92.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json identifies a Windows ARM64 package containing platform binaries and defines no lifecycle hook.
- The required runtime location defines paths related to MCP and Claude configuration, but this excerpt does not establish a configuration write or its caller.
- The executable’s bounded embedded-source analysis contains a helper that reads provider API-key values; the helper’s activation and recipient are not established.
- The host analysis explicitly says its bounded source windows cannot prove executable reachability or exclude other native behavior.
Evidence against
- No package install hook or confirmed credential transfer appears in the inspected evidence.
- The inspected runtime excerpt alone does not establish an agent configuration mutation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
6 flagged · loading sourcebin/runtime/srt/sandbox-runtime.mjsView file
60mux backend dial failed (${H})
L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=$6((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(...
L62: `).filter(Boolean);if(F===1)return[];throw Error(`ripgrep failed with exit code ${F}: ${q}`)}import{join as V0,dirname as T6}from"path";import{fileURLToPath as S6}from"url";import*...
High
Child Process
Package source references child process execution.
bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L6055\r
L56: `)}}),J.on("request",async(Q,Y)=>{Q.on("error",(G)=>{Z(`Client request error: ${G.message}`,{level:"error"})}),Y.on("error",(G)=>{Z(`Client response error: ${G.message}`,{level:"er...
L57: `)),$.end(eq(W))}function L7($){return Buffer.from([5,$,0,1,0,0,0,0,0,0])}function tq($){return new Promise((J)=>{let X=Buffer.alloc(0),Q=(W)=>{$.off("data",G),clearTimeout(Y),J(W)...
...
L60: mux backend dial failed (${H})
L61: `)}),M.on("error",()=>O.destroy()),M.once("close",()=>O.destroy()),O.once("close",()=>M.destroy()),M.pipe(O),O.pipe(M)}let U=$6((M)=>{G.add(M),M.once("close",()=>G.delete(M)),M.on(...
L62: `).filter(Boolean);if(F===1)return[];throw Error(`ripgrep failed with exit code ${F}: ${q}`)}import{join as V0,dirname as T6}from"path";import{fileURLToPath as S6}from"url";import*
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
5 High3 Medium4 Low
HighChild Processbin/runtime/srt/sandbox-runtime.mjs
HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs
HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs
HighKnown Malware Source Similaritybin/runtime/srt/sandbox-runtime.mjs
HighKnown Malware Source Fingerprint Signaturebin/runtime/srt/sandbox-runtime.mjs
MediumEnvironment Vars
MediumShips Native Binarybin/native/win32/prebuilds/win32-x64/win32-platform.node
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @reason-machines/cli-win32-arm64@0.2.394.
See all versions of @reason-machines/cli-win32-arm64 for other recorded verdicts.
- Review the evidence and your use of @reason-machines/cli-win32-arm64@0.2.394 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.