@superdoc/cli-darwin-x64@0.48.0
SuperDoc CLI binary for macOS x64. Selected automatically by @superdoc/cli; do not install it directly.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe notice directly attempts to constrain reverse engineering and AI-assisted inspection, which the review rules identify as malicious reviewer manipulation. No concrete runtime attack was established from the limited binary view.
Static reason
No blocking static signals were detected.
Trigger
Review of the distributed package; no install-time trigger was found.
Impact
This review-suppression language is evidence of malicious intent under the review rules; no concrete runtime attack or network endpoint was identified.
Mechanism
The notice prohibits deobfuscation and source reconstruction. The CLI binary’s limited embedded-source view contains obfuscated identifiers, but does not establish a malicious runtime action.
Attack narrative
The package’s notice expressly prohibits reverse engineering and deobfuscation and restricts third-party AI inspection. That language attempts to suppress security analysis, which the review rules treat as evidence of malicious intent. The available binary view is limited and does not establish a runtime attack chain.
AI rationale
The notice directly attempts to constrain reverse engineering and AI-assisted inspection, which the review rules identify as malicious reviewer manipulation. No concrete runtime attack was established from the limited binary view.
Evidence
bin/native-runtime-notices/NOTICE.mdbin/superdoc
Decision evidence
public snapshotAI called this Malicious at 82.0% confidence as Malware with low false-positive risk.
Evidence for block
- The bundled notice forbids reverse engineering and deobfuscation, and restricts uploading the package to third-party AI systems.
- The package’s CLI is an 89.6 MB Mach-O binary; its limited embedded-source view contains obfuscated identifiers, and the view cannot establish runtime reachability or behavior.
Evidence against
- The manifest declares no lifecycle scripts and exposes only the `bin/superdoc` CLI.
- The flagged DOCX artifact is an ordinary blank document package.
Behavioral surface
CopyleftLicense
Source & flagged code
6 flaggedbin/superdocView file
•path = bin/superdoc
kind = native_binary
sizeBytes = 89559856
magicHex = [redacted]
Medium
bin/assets/blank.docxView file
•path = bin/assets/blank.docx
kind = high_entropy_blob
sizeBytes = 12520
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
bin/assets/blank.docxView on unpkg•path = bin/assets/blank.docx
kind = compressed_blob
sizeBytes = 12520
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
bin/assets/blank.docxView on unpkgFindings
3 High3 Medium2 Low
HighShips High Entropy Blobbin/assets/blank.docx
HighAi Review Evidencebin/native-runtime-notices/NOTICE.md
HighAi Review Evidence.lpm-inspection-ZX1zsz/0-ce26e8f01a7c.txt
MediumShips Native Binarybin/superdoc
MediumShips Compressed Blobbin/assets/blank.docx
MediumStructural Risk Force Deep Review
LowNested Archive Needs Inspectionbin/assets/blank.docx
LowCopyleft License
Affected versions and remediation
This report applies to @superdoc/cli-darwin-x64@0.48.0.
See all versions of @superdoc/cli-darwin-x64 for other recorded verdicts.
- Avoid installing @superdoc/cli-darwin-x64@0.48.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.