registry / @tenux/cli / 1.0.4
@tenux/cli@1.0.4
Access your computer from your phone — Tenux pairs a mobile browser IDE with an agent that runs on your own machine.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe published entrypoints are a user-run CLI and library with no npm lifecycle hook and no self-dependency install chain. Shell, network, and file access match the remote IDE product and include explicit denials of credential stores.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A person runs the tenux binary and chooses a command such as start.
Impact
No unsolicited install mutation, secret harvest, foreign agent-config write, or remote payload execution was found.
Mechanism
Commander registers commands after process start. An optional fetch reads the npm latest version. Chat file tools block credential stores and Claude local settings.
AI rationale
The published entrypoints are a user-run CLI and library with no npm lifecycle hook and no self-dependency install chain. Shell, network, and file access match the remote IDE product and include explicit denials of credential stores.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the tenux bin at dist/cli.js and only build, dev, start, and lint scripts, with no preinstall, install, or postinstall hook.
- Chat file tools refuse home credential stores and .claude/settings.local.json through a built-in denial that rules cannot override.
- The CLI registers user commands and, when the binary runs, may fetch https://registry.npmjs.org/@tenux/cli/latest for an update notice.
Evidence against
- child_process spawn and exec are used for the user-facing terminal, voice, and update flows rather than an install-time payload.
- Sentry and https://dev.tenux.dev are tied to the documented remote-IDE product and the explicit start command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
10 flaggeddist/chunk-BTVNA2IG.jsView file
64m._DeChar = function(a, p) {
L65: return String.fromCharCode(a[p]);
L66: };
...
L731: let m;
L732: return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://sta...
L733: typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
...
L776: if (!r && typeof process !== "undefined" && "env" in process) {
L777: r = process.env.DEBUG;
L778: }
...
L862: }
L863: if (process.platform === "win32") {
L864: const osRelease = os3.release().split(".");
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunk-BTVNA2IG.jsView on unpkg · L6464Trigger-reachable chain: scripts.start -> dist/cli.js -> dist/chunk-BTVNA2IG.js
L64: m._DeChar = function(a, p) {
L65: return String.fromCharCode(a[p]);
L66: };
...
L731: let m;
L732: return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://sta...
L733: typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
...
L776: if (!r && typeof process !== "undefined" && "env" in process) {
L777: r = process.env.DEBUG;
L778: }
...
L862: }
L863: if (process.platform === "win32") {
L864: const osRelease = os3.release().split(".");
Critical
Findings
2 Critical7 High4 Medium8 Low
CriticalCredential Exfiltrationdist/chunk-BTVNA2IG.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-BTVNA2IG.js
HighChild Processdist/chunk-BTVNA2IG.js
HighSame File Env Network Executiondist/chunk-BTVNA2IG.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/chunk-BTVNA2IG.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/chunk-BTVNA2IG.js
HighSemantic Analysis Limiteddist/chunk-BTVNA2IG.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @tenux/cli@1.0.4.
See all versions of @tenux/cli for other recorded verdicts.
- Review the evidence and your use of @tenux/cli@1.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.