numbors@1.5.0
Numbors CLI - agent-first accounting. Create invoices, reconcile banks, manage expenses. 169 MCP tools. As easy as talking.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe CLI is user-invoked and has no install lifecycle, but the entire runtime is obfuscated while config code reads the API key and loads fs and os. That hides destinations and file writes enough to warn, without a proven theft or remote-execution chain.
Decision evidence
public snapshot- package.json has no preinstall, install, or postinstall script; scripts are build, test, and prepublishOnly only.
- bin/cli.js loads dist/main.js when the numbots command runs, with a fallback require of src/main.
- dist/main.js, dist/mcp-tools.js, and dist/commands/forecast.js are single-line string-array obfuscation, so their calls cannot be read statically.
- dist/config.js requires the fs and os modules through hex escapes and reads process.env.NUMBORS_API_KEY and process.env.NUMBORS_URL.
- No child_process, eval, Function, or writeFile literals appear in the package.
- There is no runtime dependency on the package name and no install-time hook.
- README describes a user-run accounting CLI that stores a key the user supplies.
Source & flagged code
7 flaggedPackage source references dynamic require/import behavior.
bin/cli.jsView on unpkg · L2bin/cli.js loads dist/main.js when the numbots command runs, with a fallback require of src/main.
bin/cli.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp-tools.jsView on unpkg · L1Findings
Affected versions and remediation
This report applies to numbors@1.5.0.
See all versions of numbors for other recorded verdicts.
- Review the evidence and your use of numbors@1.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.