registry / cyberneurova-cli / 0.18.10
cyberneurova-cli@0.18.10
The CyberNeurova terminal AI coding agent
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkWebSocket
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
Oversized source lightweight scan
dist/main.mjs4.50 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsDynamicRequireObfuscatedHighEntropyStringsMinifiedUrlStringsapi.anthropic.comcyberneurova.aidocs.anthropic.comdocs.expo.devgitforwindows.org
Source & flagged code
4 flaggeddist-web/assets/codeql-DsOJ9woJ.jsView file
1const e=Object.freeze(JSON.parse('{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist-web/assets/codeql-DsOJ9woJ.jsView on unpkg · L1dist-web/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2View file
•path = dist-web/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2
kind = high_entropy_blob
sizeBytes = 40404
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dist-web/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2View on unpkgdist/main.mjs
Findings
2 High6 Medium6 Low
HighShips High Entropy Blobdist-web/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2
HighOversized Source Filedist/main.mjs
MediumDynamic Requiredist-web/assets/codeql-DsOJ9woJ.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumOversized Cli Entrypointdist/main.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to cyberneurova-cli@0.18.10.
See all versions of cyberneurova-cli for other recorded verdicts.
- Review the evidence and your use of cyberneurova-cli@0.18.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.