cyberneurova-cli@0.20.6
The CyberNeurova terminal AI coding agent
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe source shows default-on runtime telemetry to the vendor, with a disable setting but no disclosure found in the README. The inspected telemetry context contains usage and runtime metadata, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Starting the CLI, unless telemetry is disabled in config or with CYBERNEUROVA_DISABLE_TELEMETRY.
Impact
The vendor receives persistent device/session identifiers and runtime and usage metadata. No credential, prompt, code, or command-output exfiltration was identified in the inspected telemetry context.
Mechanism
Batches telemetry events and posts them to the vendor endpoint; failed events may be written under homeDir/telemetry/failed_*.jsonl.
AI rationale
The source shows default-on runtime telemetry to the vendor, with a disable setting but no disclosure found in the README. The inspected telemetry context contains usage and runtime metadata, so this warrants a warning rather than a block.
Evidence
dist/main.mjshomeDir/telemetry/failed_*.jsonl
Network endpoints1
cyberneurova.ai/v1/event
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- CLI startup enables runtime telemetry unless the config disables it or CYBERNEUROVA_DISABLE_TELEMETRY is set.
- Telemetry is sent to https://cyberneurova.ai/v1/event and includes device/session IDs and runtime context such as platform, OS version, model, locale, terminal, and UI mode.
Evidence against
- The manifest has no install, preinstall, or postinstall hook.
- The API-key setup flow sends the entered key to the selected platform’s /models endpoint and saves that provider configuration.
- The inspected telemetry context contains runtime and usage metadata; no prompt, code, or command output was identified in it.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
11 flaggeddist/main.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = cyberneurova-cli@0.20.1
matchedIdentity = npm:Y3liZXJuZXVyb3ZhLWNsaQ:0.20.1
similarity = 0.967
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/main.mjsView on unpkg5const __dirname = __cjsShimDirname(__filename);
L6: import{createRequire as e}from"node:module";import*as t from"pathe";import n,{basename as r,dirname as i,isAbsolute as a,join as o,normalize as s,parse as c,relative as l,resolve a...
L7: `):[]}};Ri=new WeakMap,zi=new WeakMap,Bi.NEWLINE_CHARS=new Set([`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/main.mjsView on unpkg · L5•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/main.mjs:
import{createRequire as e}from"node:module";import*as t from"pathe";import n,{basename as r,dirname as i,isAbsolute as a,join as o,normalize as s,parse as c,relative as l,resolve a...
`)}\n${a}\n${t}`)}return a})(ca);var da=class extends aa{create(e,t){let{betas:n,...r}=e;return this._client.post(`/v1/environments?beta=true`,{body:r,...t,headers:sa([{"anthropic-...
Wrap your summary in <summary></summary> tags.`,a=W(this,ro,`f`).params.messages;if(a[a.length-1].role===`assistant`){let e=a[a.length-1];if(Array.isArray(e.content)){let t=e.conte...
`);this.baseURL=a.baseURL,this._baseURLIsExplicit=i.__baseURLIsExplicit??!!e
Findings
1 Critical7 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/main.mjs
HighSame File Env Network Executiondist/main.mjs
HighCredential Redirect Persistencedist/main.mjs
HighCommand Output Exfiltrationdist/main.mjs
HighCloud Metadata Accessdist/main.mjs
HighTrigger Reachable Command Output Exfiltrationdist/main.mjs
HighSemantic Analysis Limiteddist-web/assets/CodeBlockNode-B8Y2oNuu.js
HighKnown Malware Source Similaritydist-web/assets/chunk-AQP2D5EJ-Dkgu36A1.js
MediumDynamic Requiredist/main.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/main.mjs
Affected versions and remediation
This report applies to cyberneurova-cli@0.20.6.
See all versions of cyberneurova-cli for other recorded verdicts.
- Review the evidence and your use of cyberneurova-cli@0.20.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.