nexgenr@1.0.2
NexgenR — terminal AI coding agent
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package’s coding-agent CLI purpose is consistent with its entry point and provider network access. However, its runtime telemetry is enabled by default and includes machine context; the inspected source does not establish disclosure, so this is suspicious telemetry rather than a confirmed attack.
Decision evidence
public snapshot- The manifest describes NexgenR as a terminal AI coding agent and maps its CLI command to dist/main.mjs.
- The CLI enables telemetry by default unless config.telemetry is false.
- Telemetry context includes Node and OS versions, CI status, locale, terminal, and UI mode.
Source & flagged code
3 flaggedPackage contains source files above the normal full-analysis size ceiling.
dist/main.mjsView on unpkgPackage contains an oversized executable-looking CLI entrypoint.
dist/main.mjsView on unpkgThe manifest describes NexgenR as a terminal AI coding agent and maps its CLI command to dist/main.mjs.
package.jsonView on unpkg · L23Findings
Affected versions and remediation
This report applies to nexgenr@1.0.2.
See all versions of nexgenr for other recorded verdicts.
- Review the evidence and your use of nexgenr@1.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.