registry / nebula-notebook / 0.2.81
nebula-notebook@0.2.81
AI-native notebook computing environment — real Jupyter kernels, real filesystem, built to be driven by agents (Claude Code / Codex) via MCP
AI Security Review
scanned 17d ago · by lpm-firewall-aiSource inspection resolved the lifecycle, child-process, shell, and network hints as package setup or ordinary application behavior. No concrete attack behavior was established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Package installation, launching the server, or server startup for the update check.
Impact
No confirmed harmful effect; the inspected behavior supports repository setup and normal application functions.
Mechanism
The postinstall script exits under node_modules; the launcher starts the packaged server, GPU collection uses fixed diagnostic commands, and the update checker requests the package version from the npm registry.
AI rationale
Source inspection resolved the lifecycle, child-process, shell, and network hints as package setup or ordinary application behavior. No concrete attack behavior was established.
Network endpoints1
registry.npmjs.org/nebula-notebook/latest
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines postinstall, but the script exits when run from node_modules; its nested installs support repository checkout setup.
- The launcher starts the packaged server and forwards the caller’s arguments and environment.
- GPU resource collection runs fixed nvidia-smi and rocm-smi probes with timeouts; the source describes collection as optional.
- The update checker makes a bounded request to the npm registry to compare package versions.
- The inspected UI bundle contains notebook setup behavior, and the server bundle reads Jupyter configuration from a supplied config path; these excerpts do not establish an attack.
Evidence against
- The inspected lifecycle hook does not run its nested installs for the normal node_modules package installation path.
- The shell execution finding is explained by fixed GPU information probes; the inspected launcher starts the package’s server entrypoint. No concrete malicious behavior was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/assets/index-pBlQK-xI.jsView file
826patternName = generic_password
severity = medium
line = 826
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/assets/index-pBlQK-xI.jsView on unpkg · L826Findings
6 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/nebula-notebook.js
HighShellnode-server/dist/resources/resource-service.js
HighCross File Remote Execution Contextbin/nebula-notebook.js
HighRuntime Package Installscripts/postinstall.cjs
HighSemantic Analysis Limiteddist/assets/index-BdZ_Kjti.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patterndist/assets/index-pBlQK-xI.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/assets/index-BdZ_Kjti.js
Affected versions and remediation
This report applies to nebula-notebook@0.2.81.
See all versions of nebula-notebook for other recorded verdicts.
- Review the evidence and your use of nebula-notebook@0.2.81 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.