registry / nebula-notebook / 0.2.85
nebula-notebook@0.2.85
AI-native notebook computing environment — real Jupyter kernels, real filesystem, built to be driven by agents (Claude Code / Codex) via MCP
AI Security Review
scanned 13d ago · by lpm-firewall-aiNo malicious behavior was identified in the inspected source. The flagged patterns correspond to guarded repository setup and expected notebook functions, with no unresolved attack path established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The postinstall hook runs during installation, then exits when the package path contains node_modules; other commands run when the user launches or uses the application.
Impact
No unrelated data transfer, persistence, permission bypass, or destructive action was established.
Mechanism
For repository checkouts, the hook installs dependencies in existing project subdirectories. GPU checks use fixed hardware queries with timeouts, and the launcher starts the bundled server.
AI rationale
No malicious behavior was identified in the inspected source. The flagged patterns correspond to guarded repository setup and expected notebook functions, with no unresolved attack path established.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines a postinstall hook, but the hook exits when installed under node_modules; outside that path, it performs setup only for existing project subdirectories.
- The launcher starts the package's bundled server, which listens on its configured host and port.
- Shell use is tied to fixed GPU information queries with timeouts; environment discovery runs commands through its feature-specific runner.
- Inspected authentication, notebook, setup-prompt, and remote-identity code supports local product functions; no unrelated account or credential transfer was identified.
- The browser bundle uses relative API routes for authenticated requests; its dynamic require loads configured Jupyter settings.
- The inspected Fastify dependency snapshots implement CORS, multipart handling, and static-file serving. Their manifests show ordinary package metadata and no install lifecycle hooks.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystem
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/assets/index-pBlQK-xI.jsView file
826patternName = generic_password
severity = medium
line = 826
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/assets/index-pBlQK-xI.jsView on unpkg · L826Findings
6 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/nebula-notebook.js
HighShellnode-server/dist/resources/resource-service.js
HighCross File Remote Execution Contextbin/nebula-notebook.js
HighRuntime Package Installscripts/postinstall.cjs
HighSemantic Analysis Limiteddist/assets/index-BdZ_Kjti.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patterndist/assets/index-pBlQK-xI.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/assets/index-BdZ_Kjti.js
Affected versions and remediation
This report applies to nebula-notebook@0.2.85.
See all versions of nebula-notebook for other recorded verdicts.
- Review the evidence and your use of nebula-notebook@0.2.85 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.