nexgenk@1.8.0
NexgenK — terminal AI coding agent
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package is a terminal AI coding agent with a CLI entrypoint. The inspected network behavior is configurable first-party runtime telemetry using ordinary runtime context, with no concrete attack behavior found.
Static reason
No blocking static signals were detected.
Trigger
CLI startup and runtime; telemetry can be disabled through configuration or NEXGEN_DISABLE_TELEMETRY.
Impact
No credential theft, unrelated data collection, or unrequested account action was identified in the inspected paths.
Mechanism
Telemetry sends application/runtime context to ia.nexgen.systems. The inspected payload contains ordinary app, version, platform, locale, terminal, and mode fields.
AI rationale
The package is a terminal AI coding agent with a CLI entrypoint. The inspected network behavior is configurable first-party runtime telemetry using ordinary runtime context, with no concrete attack behavior found.
Network endpoints1
ia.nexgen.systems
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/main.mjs as the nexgenk CLI entrypoint.
- The inspected telemetry payload contains application and version, runtime and platform, locale, terminal, and mode fields.
- Telemetry is gated by configuration and supports the NEXGEN_DISABLE_TELEMETRY environment variable.
- The configured telemetry endpoint is ia.nexgen.systems, the package's own service host.
Evidence against
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Oversized source lightweight scan
dist/main.mjs15.9 MB file, sampled 256 KB
Source & flagged code
4 flaggeddist/main.mjsView file
•path = dist/main.mjs
kind = oversized_source_file
sizeBytes = 16639734
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/main.mjsView on unpkg•path = dist/main.mjs
kind = oversized_cli_entrypoint
sizeBytes = 16639734
magicHex = [redacted]
Medium
Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/main.mjsView on unpkg2001function oct(e){let{bootstrap:t}=e,n={app_name:e.appName,client_version:t.clientIdentity.version,version:t.clientIdentity.version,core_version:Ust(),runtime:`node`,platform:t.platform,arch:t.arch,node_version:process.versions.node,os_version:Ht(),ci:t.getEnv(`CI`)!==void 0,locale:e.locale??t.getEnv(`LANG`)??``,terminal:e.terminal??t.getEnv(`TERM_PR
Low
Ai Review Evidence
The inspected telemetry payload contains application and version, runtime and platform, locale, terminal, and mode fields.
dist/main.mjsView on unpkg · L2001Findings
6 Medium6 Low
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/main.mjs
MediumOversized Cli Entrypointdist/main.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/main.mjs
Affected versions and remediation
This report applies to nexgenk@1.8.0.
See all versions of nexgenk for other recorded verdicts.
- Review the evidence and your use of nexgenk@1.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.