registry  /  @rein-industries/rein  /  0.1.38

@rein-industries/rein@0.1.38

Control your coding agents (Claude Code, Codex, Gemini, opencode, Grok) from your phone. Installs the rein bridge daemon.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Install-time and first CLI use can retrieve, unpack, and execute a native binary not included in the npm tarball. No concrete malicious payload behavior is visible in the inspected JavaScript source.

Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall or running `rein` when `vendor/rein` is absent
Impact
A compromised or redirected release artifact can gain the permissions of the installing or invoking user.
Mechanism
remote native-binary download, checksum comparison, extraction, and execution
Rationale
Source inspection confirms a remote native payload carrier executed during normal package use, but does not confirm credential theft, destructive behavior, or foreign AI-agent control-surface mutation. Treat as a warning-level supply-chain/runtime risk rather than a proven malicious package.
Evidence
package.jsonscripts/postinstall.mjsbin/rein.jsREADME.mdvendor/rein-<platform>.tar.gzvendor/reinvendor/spawn-helpervendor/.rein-managed-by
Network endpoints1
github.com/rein-industries/rein/releases/download/v<version>

Decision evidence

public snapshot
AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • `package.json` runs `postinstall`.
  • `scripts/postinstall.mjs` downloads a platform tarball and executes `tar`.
  • `bin/rein.js` executes downloaded `vendor/rein`.
  • `REINS_RELEASE_BASE`/`REINS_REPO` can redirect the artifact source.
  • Checksum is fetched from the same release source as the binary.
Evidence against
  • Downloaded paths are version-pinned by default.
  • The package verifies a SHA-256 checksum before extraction.
  • Writes are confined to this package's `vendor/` directory.
  • No JS evidence of credential harvesting, exfiltration, or AI-agent config writes.
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
UrlStrings
Manifest
NoLicense
scanned 2 file(s), 5.92 KB of source, external domains: github.com

Source & flagged code

2 flagged · loading source
package.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High3 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License