chevron-venus@1.0.0

One or more suspicious static signals were detected.

npm install postinstall; venus CLI invocation

Downloaded binary could execute arbitrary native code when the CLI is run; JavaScript source itself shows no exfiltration or persistence.

install-time unverified native binary download and user-invoked execution wrapper

On install, lib/install.js creates vendor/ and either copies a local Venus build or downloads a platform executable from GitHub releases. bin/venus.js later checks for updates through npm and spawns that vendor executable with user-provided args. The reviewed JavaScript does not harvest secrets, persist, or alter AI-agent configuration, but the lifecycle-downloaded binary is not verifiable from package source.

The package has a real install-time native binary download and execution wrapper, creating unresolved supply-chain risk, but source inspection does not show concrete malicious behavior or unconsented agent control-surface mutation. A warning is appropriate rather than a publish block.