registry / @reason-machines/cli-win32-x64 / 0.2.499
@reason-machines/cli-win32-x64@0.2.499
⚠ Under reviewReason CLI native binary for win32-x64
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe inspected artifact contains a potentially sensitive credential-transfer path, but its bounded embedded-source analysis cannot establish that the path executes. This unresolved native behavior warrants manual review rather than a confirmed attack verdict.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
The candidate handoff is associated with worker startup when local logins are enabled; executable reachability is unresolved.
Impact
If reachable, the code could disclose current third-party access tokens to the Reason service; an active transfer is unverified.
Mechanism
Candidate code reads OAuth token records and submits changed records to the local-subscription route through the Reason device client.
AI rationale
The inspected artifact contains a potentially sensitive credential-transfer path, but its bounded embedded-source analysis cannot establish that the path executes. This unresolved native behavior warrants manual review rather than a confirmed attack verdict.
Evidence
bin/reason.exe.lpm-inspection-G0pBzh/0-b5535274c9cd.txt
Network endpoints1
/app/local-runtime/local-subscription
Decision evidence
public snapshotAI called this Manual Review at 93.0% confidence as Unknown with medium false-positive risk.
AI review observations
- Embedded code appears to parse OAuth access tokens from local provider stores into provider records.
- A background routine submits changed records to a local-subscription API route through the Reason device client when local logins are enabled.
- The connect path defaults local logins on without an override or API key; embedded help says Reason receives current access tokens.
- The trusted analysis says these embedded source windows do not prove loader or bytecode reachability, leaving activation and actual sends unresolved.
Evidence against
- Embedded help describes local-login sharing and says only current access tokens are used; that disclosure does not establish whether the candidate code runs or resolve recipient consent.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcebin/runtime/srt/sandbox-runtime.mjsView file
60mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*...
High
Child Process
Package source references child process execution.
bin/runtime/srt/sandbox-runtime.mjsView on unpkg · L6055\r
L56: `)}}),t.on("request",async(r,i)=>{r.on("error",(a)=>{C(`Client request error: ${a.message}`,{level:"error"})}),i.on("error",(a)=>{C(`Client response error: ${a.message}`,{level:"er...
L57: `)),e.end(fx(s))}function _l(e){return Buffer.from([5,e,0,1,0,0,0,0,0,0])}function dx(e){return new Promise((t)=>{let n=Buffer.alloc(0),r=(s)=>{e.off("data",a),clearTimeout(i),t(s)...
...
L60: mux backend dial failed (${d})
L61: `)}),l.on("error",()=>c.destroy()),l.once("close",()=>c.destroy()),c.once("close",()=>l.destroy()),l.pipe(c),c.pipe(l)}let o=px((l)=>{a.add(l),l.once("close",()=>a.delete(l)),l.on(...
L62: `).filter(Boolean);if(y===1)return[];throw Error(`ripgrep failed with exit code ${y}: ${f}`)}import{join as dr,dirname as Vx}from"path";import{fileURLToPath as Fx}from"url";import*
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
5 High3 Medium4 Low
HighChild Processbin/runtime/srt/sandbox-runtime.mjs
HighSame File Env Network Executionbin/runtime/srt/sandbox-runtime.mjs
HighCommand Output Exfiltrationbin/runtime/srt/sandbox-runtime.mjs
HighKnown Malware Source Similaritybin/runtime/srt/sandbox-runtime.mjs
HighKnown Malware Source Fingerprint Signaturebin/runtime/srt/sandbox-runtime.mjs
MediumEnvironment Vars
MediumShips Native Binarybin/native/win32/prebuilds/win32-x64/win32-platform.node
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @reason-machines/cli-win32-x64@0.2.499.
See all versions of @reason-machines/cli-win32-x64 for other recorded verdicts.
- Review the evidence and your use of @reason-machines/cli-win32-x64@0.2.499 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.