registry / @tenux/cli / 1.0.5
@tenux/cli@1.0.5
Access your computer from your phone — Tenux pairs a mobile browser IDE with an agent that runs on your own machine.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has no preinstall, install, or postinstall hook and its executable behavior is activated through user CLI invocation. Inspected entrypoint code defaults the terminal listener to localhost and showed no concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the tenux executable and selects a command such as start.
Impact
No unconsented install-time execution, credential harvesting, or attacker-directed data transfer was identified.
Mechanism
The CLI parses user arguments and starts a terminal service bound to loopback by default.
AI rationale
The package has no preinstall, install, or postinstall hook and its executable behavior is activated through user CLI invocation. Inspected entrypoint code defaults the terminal listener to localhost and showed no concrete malicious behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package metadata exposes a CLI and contains no automatic install lifecycle hook; its listed build hook is prepublish-only.
- The CLI registers commands and parses arguments only when the executable is invoked.
- The terminal server listens on loopback by default rather than exposing a listener on all interfaces.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
11 flaggeddist/chunk-C5ZZPXRF.jsView file
64m._DeChar = function(a, p) {
L65: return String.fromCharCode(a[p]);
L66: };
...
L731: let m;
L732: return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://sta...
L733: typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
...
L776: if (!r && typeof process !== "undefined" && "env" in process) {
L777: r = process.env.DEBUG;
L778: }
...
L862: }
L863: if (process.platform === "win32") {
L864: const osRelease = os3.release().split(".");
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunk-C5ZZPXRF.jsView on unpkg · L6464Trigger-reachable chain: scripts.start -> dist/cli.js -> dist/chunk-C5ZZPXRF.js
L64: m._DeChar = function(a, p) {
L65: return String.fromCharCode(a[p]);
L66: };
...
L731: let m;
L732: return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://sta...
L733: typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
...
L776: if (!r && typeof process !== "undefined" && "env" in process) {
L777: r = process.env.DEBUG;
L778: }
...
L862: }
L863: if (process.platform === "win32") {
L864: const osRelease = os3.release().split(".");
Critical
Findings
3 Critical7 High4 Medium9 Low
CriticalCredential Exfiltrationdist/chunk-C5ZZPXRF.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-C5ZZPXRF.js
CriticalPrevious Version Dangerous Deltadist/chunk-C5ZZPXRF.js
HighChild Processdist/chunk-C5ZZPXRF.js
HighSame File Env Network Executiondist/chunk-C5ZZPXRF.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/chunk-C5ZZPXRF.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/chunk-C5ZZPXRF.js
HighSemantic Analysis Limiteddist/chunk-C5ZZPXRF.js
MediumDynamic Require
Affected versions and remediation
This report applies to @tenux/cli@1.0.5.
See all versions of @tenux/cli for other recorded verdicts.
- Review the evidence and your use of @tenux/cli@1.0.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.