nexgenk@1.5.0
NexgenK — terminal AI coding agent
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package presents as a terminal AI coding agent, with no install hook and no identified unauthorized credential use or unrelated collection. Its network, filesystem, and process behavior is consistent with its stated purpose.
Static reason
No blocking static signals were detected.
Trigger
The CLI runs when the user invokes nexgenk; no install lifecycle hook is declared.
Impact
No malicious or unauthorized behavior was identified in the inspected source.
Mechanism
The inspected source connects to the package's service and uses configured AI providers and local project files. Telemetry has configuration and environment-variable disable controls.
AI rationale
The package presents as a terminal AI coding agent, with no install hook and no identified unauthorized credential use or unrelated collection. Its network, filesystem, and process behavior is consistent with its stated purpose.
Network endpoints1
ia.nexgen.systems
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies NexgenK as a terminal AI coding agent and maps its executable to dist/main.mjs.
- The manifest has build and maintenance scripts but no install, preinstall, or postinstall hook.
- Runtime telemetry can be disabled through configuration or NEXGEN_DISABLE_TELEMETRY; its configured endpoint is ia.nexgen.systems.
Evidence against
- The CLI uses network access and credentials for its stated AI coding and account features; review found no automatic forwarding of unrelated credentials.
- The oversized search worker begins with ordinary filesystem and worker-thread code; no malicious behavior was identified in the inspected portions.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/main.mjsView file
•path = dist/main.mjs
kind = oversized_source_file
sizeBytes = 18046614
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/main.mjsView on unpkg•path = dist/main.mjs
kind = oversized_cli_entrypoint
sizeBytes = 18046614
magicHex = [redacted]
Medium
Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/main.mjsView on unpkgpackage.jsonView file
16"bin": {
"nexgenk": "dist/main.mjs"
},
"files": [
"dist",
"dist-web",
"README.md",
"LICENSE",
"NOTICE"
],
"type": "module",
"imports": {
"#/tui/theme": "./src/tui/theme/index.ts",
Low
Ai Review Evidence
The manifest identifies NexgenK as a terminal AI coding agent and maps its executable to dist/main.mjs.
package.jsonFindings
6 Medium6 Low
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/main.mjs
MediumOversized Cli Entrypointdist/main.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to nexgenk@1.5.0.
See all versions of nexgenk for other recorded verdicts.
- Review the evidence and your use of nexgenk@1.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.