nexgenr@1.0.3
NexgenR — terminal AI coding agent
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe source shows default runtime telemetry to the package’s own service, including a persistent device ID and periodic machine metrics, without disclosure in the README. This warrants a warning for undisclosed telemetry; the reviewed flow did not show credential or file-content exfiltration.
Static reason
No blocking static signals were detected.
Trigger
CLI or web-server startup; telemetry is enabled unless configuration disables it.
Impact
The service can associate usage events and machine measurements with a persistent device identifier; the README does not disclose this telemetry.
Mechanism
The app queues event records with a persistent device ID and runtime context, adds periodic CPU and memory measurements, and sends them to https://ia.nexgen.systems.
AI rationale
The source shows default runtime telemetry to the package’s own service, including a persistent device ID and periodic machine metrics, without disclosure in the README. This warrants a warning for undisclosed telemetry; the reviewed flow did not show credential or file-content exfiltration.
Evidence
dist/main.mjsREADME.md
Network endpoints1
ia.nexgen.systems
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI initializes runtime telemetry by default unless telemetry is disabled in its configuration; the package README does not disclose this collection.
- Telemetry includes a persistent device ID, session and event IDs, app/runtime metadata, and periodic CPU and memory measurements, sent to https://ia.nexgen.systems.
- The README describes NexgenR as a terminal AI coding agent and documents its inference and MCP endpoints.
Evidence against
- The manifest declares no install, preinstall, or postinstall lifecycle scripts.
- The telemetry data reviewed consists of analytics and machine metrics; no credential or file-content collection was identified in that flow.
- The README documents the package’s intended CLI and network features.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
3 flaggeddist/main.mjsView file
•path = dist/main.mjs
kind = oversized_source_file
sizeBytes = 17944899
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/main.mjsView on unpkg•path = dist/main.mjs
kind = oversized_cli_entrypoint
sizeBytes = 17944899
magicHex = [redacted]
Medium
Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/main.mjsView on unpkgREADME.mdView file
57## What it talks to
| Capability | Endpoint |
|---|---|
| Chat, streaming only | `POST /v1/chat/completions` |
| Model catalog | `GET /v1/models` |
| Health and published limits | `GET /health`, no credential |
| MCP gateway | `POST /mcp` — 24 tools (8 Brave_Search, 16 Crawl4AI) |
`POST /v1/completions` and `POST /v1/embeddings` are in the edge allowlist but the engine
answers 404: `POST /v1/chat/completions` is the only inference route.
Limits, as published by
Medium
Findings
7 Medium4 Low
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/main.mjs
MediumOversized Cli Entrypointdist/main.mjs
MediumStructural Risk Force Deep Review
MediumAi Review EvidenceREADME.md
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to nexgenr@1.0.3.
See all versions of nexgenr for other recorded verdicts.
- Review the evidence and your use of nexgenr@1.0.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.