numbors@1.3.0
Numbors CLI - agent-first accounting. Create invoices, reconcile banks, manage expenses. 118 MCP tools. As easy as talking.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo concrete malicious behavior or unconsented lifecycle mutation was established, so blocking is not justified. The pervasive obfuscation of executable runtime code creates material unresolved risk.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs the numbors CLI.
Impact
Unresolved runtime behavior; no concrete malicious chain was confirmed.
Mechanism
Obfuscated CLI and MCP runtime bundle.
AI rationale
No concrete malicious behavior or unconsented lifecycle mutation was established, so blocking is not justified. The pervasive obfuscation of executable runtime code creates material unresolved risk.
Evidence
package.jsonbin/cli.jsdist/config.jsdist/main.jsdist/mcp-tools.jsREADME.md
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The user-invoked CLI loads a large obfuscated runtime bundle.
- dist/config.js imports fs and os through obfuscated string decoding.
- dist/mcp-tools.js is heavily obfuscated, preventing reliable static confirmation of its runtime effects.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The bin entry runs only when the user invokes numbors.
- README documents agent-rule changes as a user action.
- README documents local config creation only through explicit login --local.
- No readable source evidence confirms credential exfiltration, shell execution, destructive actions, or foreign agent-config mutation.
Behavioral surface
DynamicRequireEnvironmentVars
MinifiedPossibleObfuscation
NoLicense
Source & flagged code
5 flaggedbin/cli.jsView file
2try {
L3: require('../dist/main');
L4: } catch (e) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/cli.jsView on unpkg · L21#!/usr/bin/env node
try {
require('../dist/main');
} catch (e) {
Medium
Ai Review Evidence
The user-invoked CLI loads a large obfuscated runtime bundle.
bin/cli.jsView on unpkg · L1dist/mcp-tools.jsView file
1function a0_0xcb9ad8(_0x192245,_0x1edfd2){return a0_0xd391(_0x192245-0x323,_0x1edfd2);}function a0_0x2be89a(_0x4c5092,_0x287a2c){return a0_0xd391(_0x4c5092-0x5c,_0x287a2c);}(functi...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp-tools.jsView on unpkg · L1Findings
1 High6 Medium3 Low
HighObfuscated Payload Loaderdist/mcp-tools.js
MediumDynamic Requirebin/cli.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencebin/cli.js
MediumAi Review Evidencedist/config.js
MediumAi Review Evidencedist/mcp-tools.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowNo License
Affected versions and remediation
This report applies to numbors@1.3.0.
See all versions of numbors for other recorded verdicts.
- Review the evidence and your use of numbors@1.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.