registry / nolo-cli / 0.50.0

nolo-cli@0.50.0

Agent-first terminal workspace for Nolo

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The CLI can maintain an authenticated machine connector that dispatches server-delivered run messages, and it can execute shell commands for reports. These powerful actions are runtime features, not install-time behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs connector or reporting functionality, or explicitly runs nolo update.

Impact

A compromised authorized Nolo service or unsafe report input could cause commands to run with the invoking user's permissions.

Mechanism

Authenticated remote command dispatch, shell command execution, and explicit self-update.

AI rationale

The package has high-risk agent and shell capabilities that merit a warning, but static inspection did not establish malicious install-time or covert attack behavior. Its risky paths are user-invoked runtime features rather than lifecycle hooks.

Evidence

machineCommands-YSXTOWHQ.jschunk-GHE5XMVR.jschunk-T5HJEUQN.js.nolo/updates

Network endpoints1

registry.npmjs.org

Decision evidence

public snapshot

AI called this Suspicious at 79.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The manifest exposes a runnable CLI that starts an agent workspace.
The package contains an agent-runtime instruction layer.
A machine connector forwards WebSocket messages to a run-message handler with its authentication token in the runtime environment.
The reporting feature executes supplied commands through a shell.
The explicit update command force-installs the CLI globally from npm.

Evidence against

package.json has no preinstall, install, postinstall, or other lifecycle script.
The global update path is registered only for the explicit nolo update command.
The inspected update check only queries the npm registry for version metadata.
No source inspected showed secret collection, stealthy exfiltration, or automatic foreign agent-configuration mutation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetwork

Source & flagged code

13 flagged

chunk-OSUZKICS.jsView file

4537patternName = generic_password severity = medium line = 4537

Medium

Secret Pattern

Package contains a possible secret pattern.

chunk-OSUZKICS.jsView on unpkg · L4537

11885var findModelConfig = async (modelName, provider) => { L11886: const { ALL_MODELS } = await import("./models-CW5EL6Z7.js"); L11887: const name = toTrimmedString(modelName);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

chunk-OSUZKICS.jsView on unpkg · L11885

5853patternName = generic_password severity = medium line = 5853

Medium

Secret Pattern

Hardcoded password in chunk-OSUZKICS.js

chunk-OSUZKICS.jsView on unpkg · L5853

7112patternName = generic_password severity = medium line = 7112

Medium

Secret Pattern

Hardcoded password in chunk-OSUZKICS.js

chunk-OSUZKICS.jsView on unpkg · L7112

8292patternName = generic_password severity = medium line = 8292

Medium

Secret Pattern

Hardcoded password in chunk-OSUZKICS.js

chunk-OSUZKICS.jsView on unpkg · L8292

19977} L19978: const importBridge = new Function("specifier", "return import(specifier)"); L19979: const { readXPostWithBridge } = await importBridge("../../integrations/x-[redacted].ts");

Low

Eval

Package source references a known benign dynamic code generation pattern.

chunk-OSUZKICS.jsView on unpkg · L19977

machineCommands-YSXTOWHQ.jsView file

Lines 1-26javascript

1import {

2 buildMachinePermissionPromptBlock,

3 handleConnectorRunMessage,

4 resolveMachineRunPermissionPolicy

5} from "./chunk-Q2QN2RHG.js";

6import {

7 isConnectorWebSocketAuthError,

8 isConnectorWebSocketRetryableError,

High

Cross File Remote Execution Context

chunk-GHE5XMVR.jsView file

Lines 22-62javascript

22 const minutes = Math.floor(elapsedMs / 6e4) % 60;

23 const hours = Math.floor(elapsedMs /

chunk-GKNGRBE6.jsView file

Lines 143-183javascript

143 const value = asOptionalTrimmedString(item);

144 return value ? [value] : [];

145 });

146 if (command.length ===

chunk-T5HJEUQN.jsView file

Lines 3-43javascript

3} from "./chunk-UNZDCI3O.js";

4import {

5 resolveDefaultSpawn

6} from "./chunk-IDZTNRP2.js";

7import {

8 isCompiledBinary

9} from "./chunk-A7GB5UGH.js";

chunk-DXOELY7S.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

chunk-DXOELY7S.js#virtual:normalized:round1View on unpkg

Source & flagged code

13 flagged · loading source

chunk-OSUZKICS.jsView file

4537patternName = generic_password severity = medium line = 4537

Medium

Secret Pattern

Package contains a possible secret pattern.

chunk-OSUZKICS.jsView on unpkg · L4537

11885var findModelConfig = async (modelName, provider) => { L11886: const { ALL_MODELS } = await import("./models-CW5EL6Z7.js"); L11887: const name = toTrimmedString(modelName);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

chunk-OSUZKICS.jsView on unpkg · L11885

5853patternName = generic_password severity = medium line = 5853

Medium

Secret Pattern

Hardcoded password in chunk-OSUZKICS.js

chunk-OSUZKICS.jsView on unpkg · L5853

7112patternName = generic_password severity = medium line = 7112

Medium

Secret Pattern

Findings

1 Critical5 High8 Medium6 Low

CriticalPrevious Version Dangerous Deltachunk-T5HJEUQN.js

HighChild ProcessmachineCommands-YSXTOWHQ.js

HighShellchunk-GHE5XMVR.js

HighSandbox Evasion Gated Capabilitychunk-T5HJEUQN.js

HighCross File Remote Execution ContextmachineCommands-YSXTOWHQ.js

HighSemantic Analysis Limitedchunk-DXOELY7S.js#virtual:normalized:round1

MediumSecret Patternchunk-OSUZKICS.js

MediumDynamic Requirechunk-OSUZKICS.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patternchunk-OSUZKICS.js

MediumSecret Pattern

Affected versions and remediation

This report applies to nolo-cli@0.50.0.

See version security history for other recorded verdicts.

Review the evidence and your use of nolo-cli@0.50.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-10 01:50:02.421Z (UTC).