registry / @tenux/cli / 1.0.0
@tenux/cli@1.0.0
Tenux — mobile-first IDE for 10x engineering
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe static alert reflects an explicit AI-provider key setup feature, not credential harvesting or redirection to an unofficial endpoint. No install hook, automatic execution chain, or concrete malicious behavior was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the AI-key setup command and supplies a key.
Impact
The supplied key is sent to the selected provider for validation and stored locally for the CLI's offline fallback.
Mechanism
Provider-key validation and local Tenux configuration storage.
AI rationale
The static alert reflects an explicit AI-provider key setup feature, not credential harvesting or redirection to an unofficial endpoint. No install hook, automatic execution chain, or concrete malicious behavior was found.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The CLI accepts a user-supplied AI key and sends it in an authorization header to validate the selected provider.
- The package persists a supplied provider key in its own Tenux configuration.
- The manifest exposes a CLI and library entry point, with no install lifecycle hook.
Evidence against
- Key validation is an explicit `tenux ai keys set` command and identifies it as device-local offline fallback.
- The inspected provider definition uses the named Anthropic API host; no fixed unofficial credential receiver was found.
- No automatic install-time execution, self-dependency, or unconsented agent-control-surface mutation was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
12 flaggeddist/chunk-T7K3JJWJ.jsView file
50m._DeChar = function(a, p) {
L51: return String.fromCharCode(a[p]);
L52: };
...
L717: let m;
L718: return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://sta...
L719: typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
...
L762: if (!r && typeof process !== "undefined" && "env" in process) {
L763: r = process.env.DEBUG;
L764: }
...
L848: }
L849: if (process.platform === "win32") {
L850: const osRelease = os3.release().split(".");
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunk-T7K3JJWJ.jsView on unpkg · L5050Trigger-reachable chain: scripts.start -> dist/cli.js -> dist/chunk-T7K3JJWJ.js
L50: m._DeChar = function(a, p) {
L51: return String.fromCharCode(a[p]);
L52: };
...
L717: let m;
L718: return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://sta...
L719: typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
...
L762: if (!r && typeof process !== "undefined" && "env" in process) {
L763: r = process.env.DEBUG;
L764: }
...
L848: }
L849: if (process.platform === "win32") {
L850: const osRelease = os3.release().split(".");
Critical
Findings
2 Critical9 High3 Medium8 Low
CriticalCredential Exfiltrationdist/chunk-T7K3JJWJ.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-T7K3JJWJ.js
HighChild Processdist/chunk-T7K3JJWJ.js
HighShelldist/chunk-T7K3JJWJ.js
HighSame File Env Network Executiondist/chunk-T7K3JJWJ.js
HighCredential Redirect Persistencedist/chunk-T7K3JJWJ.js
HighCommand Output Exfiltrationdist/chunk-T7K3JJWJ.js
HighCopied Package Dependency Bridgedist/cli.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/chunk-T7K3JJWJ.js
HighSemantic Analysis Limiteddist/chunk-T7K3JJWJ.js
Affected versions and remediation
This report applies to @tenux/cli@1.0.0.
See all versions of @tenux/cli for other recorded verdicts.
- Review the evidence and your use of @tenux/cli@1.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.