nexgenr@1.0.1
NexgenR — terminal AI coding agent
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package’s model and MCP traffic matches its coding-agent purpose, but its CLI also sends runtime telemetry by default. The telemetry is limited to usage and resource metrics in the inspected code, making this an undisclosed telemetry concern rather than clear malicious data theft.
Static reason
No blocking static signals were detected.
Trigger
Telemetry initializes when the CLI starts or a session is created; it is enabled by default unless disabled in configuration or with NEXGENR_DISABLE_TELEMETRY.
Impact
The vendor receives persistent device-linked usage and resource data without clear disclosure in the README; no credential or user-content exfiltration was identified.
Mechanism
The telemetry collector samples process CPU and memory use and host load and memory, then posts events with a device ID and app/session context.
AI rationale
The package’s model and MCP traffic matches its coding-agent purpose, but its CLI also sends runtime telemetry by default. The telemetry is limited to usage and resource metrics in the inspected code, making this an undisclosed telemetry concern rather than clear malicious data theft.
Evidence
dist/main.mjsREADME.md~/.nexgenr/telemetry
Network endpoints2
ia.nexgen.systemsredteam.nexgen.systems/v1
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The README describes a terminal AI coding agent and documents redteam.nexgen.systems for inference and MCP requests; those requests fit the package’s stated purpose.
- The default runtime telemetry setup enables collection unless telemetry is explicitly disabled in configuration or with NEXGENR_DISABLE_TELEMETRY.
- Telemetry collects process uptime, CPU usage, memory figures, load average and CPU count, and sends events with a device ID to https://ia.nexgen.systems.
- Telemetry initialization also attaches the app version, UI mode, model, region and session ID to the telemetry context.
Evidence against
- The package is explicitly presented as an AI coding agent, so user-requested model and MCP network traffic is expected.
- The README documents an API key for the redteam.nexgen.systems service and describes the package’s inference endpoints.
- package.json declares no lifecycle scripts.
- The inspected telemetry fields do not show file contents, credentials, command arguments or tool input/output being sent.
Behavioral surface
ChildProcess
Source & flagged code
4 flaggeddist/main.mjsView file
•path = dist/main.mjs
kind = oversized_source_file
sizeBytes = 17950163
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/main.mjsView on unpkg•path = dist/main.mjs
kind = oversized_cli_entrypoint
sizeBytes = 17950163
magicHex = [redacted]
Medium
Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/main.mjsView on unpkgREADME.mdView file
21NexgenR signs in with an API key. There is no OAuth and no device flow:
```sh
export NEXGENR_API_KEY="<your key>"
# optional, defaults to https://redteam.nexgen.systems/v1
export NEXGENR_BASE_URL="
Medium
Ai Review Evidence
The README describes a terminal AI coding agent and documents redteam.nexgen.systems for inference and MCP requests; those requests fit the package’s stated purpose.
Findings
8 Medium4 Low
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/main.mjs
MediumOversized Cli Entrypointdist/main.mjs
MediumStructural Risk Force Deep Review
MediumAi Review EvidenceREADME.md
MediumAi Review EvidenceREADME.md
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to nexgenr@1.0.1.
See all versions of nexgenr for other recorded verdicts.
- Review the evidence and your use of nexgenr@1.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.