registry / @s2code/t3-linux-arm64 / 0.1.6-nightly.20261104.90
@s2code/t3-linux-arm64@0.1.6-nightly.20261104.90
s2code CLI executable for linux-arm64
AI Security Review
scanned 19h ago · by lpm-firewall-aiThe package is a Linux ARM64 T3 CLI build, and the inspected findings fit its setup and agent SDK features. I found no source evidence tying the scanner's flags to unauthorized collection, concealed execution, or other malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
No malicious automatic trigger was found; the inspected installer commands appear in setup UI for Claude and Codex.
Impact
No unauthorized credential collection, data exfiltration, or other attack behavior was established.
Mechanism
The package metadata describes a platform-specific CLI executable. Inspected SDK telemetry targets Cursor's backend and reports SDK and platform details.
AI rationale
The package is a Linux ARM64 T3 CLI build, and the inspected findings fit its setup and agent SDK features. I found no source evidence tying the scanner's flags to unauthorized collection, concealed execution, or other malicious behavior.
Network endpoints3
api2.cursor.shclaude.aichatgpt.com
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package identifies itself as the Linux ARM64 executable for the T3 CLI; package.json contains no lifecycle scripts or JavaScript entry point.
- The Cursor SDK telemetry code targets its configured Cursor backend and includes SDK version and platform fields.
- The UI contains official Claude and Codex installation commands, consistent with a user-facing setup feature.
Evidence against
- The package includes a native executable and large bundled dependencies whose full runtime behavior is not established by these excerpts.
- The setup UI includes commands that download and run installers when used.
Behavioral surface
DynamicRequireEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
17 flaggednode_modules/@cursor/sdk/dist/esm/250.jsView file
1/*! For license information please see 250.js.LICENSE.txt */
L2: export const __webpack_esm_id__=250;export const __webpack_esm_ids__=[250];export const __webpack_esm_modules__={"../../node_modules/.pnpm/exif-parser@0.1.12/node_modules/exif-pars...
High
Eval
Package source references dynamic code evaluation.
node_modules/@cursor/sdk/dist/esm/250.jsView on unpkg · L1client/assets/PdfViewer-DbCyAsic.jsView file
1import{i as e}from"./rolldown-runtime-COiEfhsA.js";import{t}from"./react-BP46yLMB.js";import{n,t as r}from"./jsx-runtime-BQExFN_X.js";import{t as i}from"./chevron-down-CYDJCNW_.js"...
L2: struct Uniforms {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
client/assets/PdfViewer-DbCyAsic.jsView on unpkg · L1Findings
2 Critical8 High8 Medium4 Low
CriticalSame File Env Network Executionnode_modules/@cursor/sdk/dist/esm/336.js
CriticalPrevious Version Dangerous Deltanode_modules/@cursor/sdk/dist/bundled/index.js
HighEvalnode_modules/@cursor/sdk/dist/esm/250.js
HighCommand Output Exfiltrationnode_modules/@cursor/sdk/dist/esm/587.js
HighSandbox Evasion Gated Capabilitynode_modules/@cursor/sdk/dist/esm/index.js
HighObfuscated Payload Loadernode_modules/playwright-core/lib/coreBundle.js
HighExternal Ai Agent Control Surface Mutationnode_modules/playwright-core/lib/coreBundle.js
HighCross File Remote Execution Contextnode_modules/@cursor/sdk/dist/bundled/index.js
HighShips High Entropy Blobclient/assets/FoxitSerifItalic-CQs5lx9Y.pfb
Affected versions and remediation
This report applies to @s2code/t3-linux-arm64@0.1.6-nightly.20261104.90.
See all versions of @s2code/t3-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @s2code/t3-linux-arm64@0.1.6-nightly.20261104.90 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.