registry / @s2code/t3-linux-arm64 / 0.1.0-nightly.20261026.61
@s2code/t3-linux-arm64@0.1.0-nightly.20261026.61
⚠ Under reviews2code CLI executable for linux-arm64
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe reviewed JavaScript findings do not establish malicious behavior: the Playwright workspace setup is explicitly invoked, and the runtime hint concerns settings-save reporting. The package contains a native executable whose behavior is unavailable to source inspection, leaving a material part of this CLI package unresolved.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The package's native executable is run.
Impact
The executable's effects remain unresolved, so this review cannot determine whether it creates an attack surface.
Mechanism
Its behavior is not visible in the inspected source files.
AI rationale
The reviewed JavaScript findings do not establish malicious behavior: the Playwright workspace setup is explicitly invoked, and the runtime hint concerns settings-save reporting. The package contains a native executable whose behavior is unavailable to source inspection, leaving a material part of this CLI package unresolved.
Evidence
package.jsonnode_modules/playwright-core/lib/coreBundle.jsclient/assets/useSettings-wlPaifXs.jst3
Decision evidence
public snapshotAI called this Manual Review at 56.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest identifies this as a Linux ARM64 CLI package and includes a native executable.
- The Playwright CLI only initializes workspace skills when its explicit initialization option is used, and copies them into the project directory.
- The highlighted settings excerpt reports save results; it does not show an unrelated account action.
Evidence against
- The inspected source does not establish automatic agent configuration changes, payload execution, or credential exfiltration.
Behavioral surface
EvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
14 flaggednode_modules/@cursor/sdk/dist/esm/250.jsView file
1/*! For license information please see 250.js.LICENSE.txt */
L2: export const __webpack_esm_id__=250;export const __webpack_esm_ids__=[250];export const __webpack_esm_modules__={"../../node_modules/.pnpm/exif-parser@0.1.12/node_modules/exif-pars...
Low
Eval
Package source references a known benign dynamic code generation pattern.
node_modules/@cursor/sdk/dist/esm/250.jsView on unpkg · L1node_modules/@cursor/sdk/dist/bundled/sqlite.jsView file
1// @bun
L2: var JM=Object.create;var{getPrototypeOf:YM,defineProperty:TQ,getOwnPropertyNames:XM}=Object;var zM=Object.prototype.hasOwnProperty;var _N=(Z,$,J)=>{J=Z!=null?JM(YM(Z)):{};let Y=$||...
L3: ${Z.map(($,J)=>`${J+1}) ${$.toString()}`).join(`
L4: `)}`:"");this.errors=Z,this.name="UnsubscriptionError"}}WG.UnsubscriptionError=rK;class fK{initialTeardown;static EMPTY=(()=>{let Z=new fK;return Z.closed=!0,Z})();closed=!1;_final...
L5: `).slice(1);for(let V of P){let T=V.trim();if(T)L.push(`${$.indent}${J.dim(T)}`)}}}let O=L.join(`
L6: `);switch(z.level){case"debug":case"info":Y.log(O);break;case"warn":Y.warn(O);break;case"error":Y.error(O);break;default:{let f=z.level;throw Error(`Unhandled log level: ${f}`)}}}}...
L7: PRAGMA synchronous = NORMAL;
Findings
1 Critical7 High6 Medium5 Low
CriticalTrojan Source Unicodeclient/assets/ChatMarkdown-DCZLVLcl.js
HighSame File Env Network Executionnode_modules/@cursor/sdk/dist/esm/index.js
HighCommand Output Exfiltrationnode_modules/@cursor/sdk/dist/esm/index.js
HighSandbox Evasion Gated Capabilitynode_modules/@cursor/sdk/dist/esm/index.js
HighObfuscated Payload Loadernode_modules/playwright-core/lib/coreBundle.js
HighExternal Ai Agent Control Surface Mutationnode_modules/playwright-core/lib/coreBundle.js
HighCross File Remote Execution Contextnode_modules/@cursor/sdk/dist/bundled/index.js
HighSemantic Analysis Limitedclient/assets/DiffCommentAnnotation-DcOwzAny.js#virtual:normalized:round1
MediumNetwork
MediumShips Native Binary
Affected versions and remediation
This report applies to @s2code/t3-linux-arm64@0.1.0-nightly.20261026.61.
See all versions of @s2code/t3-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @s2code/t3-linux-arm64@0.1.0-nightly.20261026.61 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.