nexgenk
NexgenK — terminal AI coding agent
This report shows the evidence for nexgenk@1.8.0. 0 of 8 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package is a terminal AI coding agent with a CLI entrypoint. The inspected network behavior is configurable first-party runtime telemetry using ordinary runtime context, with no concrete attack behavior found.
Decision evidence
public snapshot- The manifest exposes dist/main.mjs as the nexgenk CLI entrypoint.
- The inspected telemetry payload contains application and version, runtime and platform, locale, terminal, and mode fields.
- Telemetry is gated by configuration and supports the NEXGEN_DISABLE_TELEMETRY environment variable.
- The configured telemetry endpoint is ia.nexgen.systems, the package's own service host.
Source & flagged code
4 flaggedPackage contains source files above the normal full-analysis size ceiling.
dist/main.mjsView on unpkgPackage contains an oversized executable-looking CLI entrypoint.
dist/main.mjsView on unpkgThe inspected telemetry payload contains application and version, runtime and platform, locale, terminal, and mode fields.
dist/main.mjsView on unpkg · L2001Findings
Affected versions and remediation
This report applies to nexgenk@1.8.0.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of nexgenk@1.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.