nebula-notebook@0.2.38
AI-native notebook computing environment — real Jupyter kernels, real filesystem, built to be driven by agents (Claude Code / Codex) via MCP
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe install hook is guarded against execution from node_modules and only performs transparent development setup in package-owned checkout subdirectories. Static inspection found no concrete malicious chain or unauthorized control-surface modification.
Decision evidence
public snapshot- The manifest runs a postinstall script, so installation behavior was inspected.
- The postinstall exits when installed under node_modules; its package-manager calls are limited to checkout subdirectories.
- The executable only launches the bundled server with the caller's arguments and environment.
- The required frontend bundle contains a normal module-preload loader; no hidden install-time payload was found.
- No self-dependency, credential collection, secret exfiltration, or foreign agent-control-surface mutation was found.
- The postinstall is transparent and does not run for a registry dependency installation.
- Network activity inspected is package-aligned update checking or user-facing application functionality.
Source & flagged code
9 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/assets/index-BnQLGXqd.jsView on unpkgFindings
Affected versions and remediation
This report applies to nebula-notebook@0.2.38.
See all versions of nebula-notebook for other recorded verdicts.
- Review the evidence and your use of nebula-notebook@0.2.38 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.