numbors@1.6.0
⚠ Under reviewNumbors CLI - agent-first accounting. Create invoices, reconcile banks, manage expenses. 481 MCP tools. As easy as talking.
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe CLI reaches bundled runtime code whose encoded strings and decoder logic prevent reliable assessment from the inspected excerpts. No concrete attack was established, but the opaque reachable behavior remains unresolved and warrants manual review.
Static reason
One or more suspicious static signals were detected.
Trigger
Invoking the `numbors` CLI loads `dist/main.js`.
Impact
The opaque runtime behavior could not be assessed, so malicious impact is unconfirmed.
Mechanism
Encoded string tables and decoder logic obscure the runtime behavior in the CLI bundle and flagged modules.
AI rationale
The CLI reaches bundled runtime code whose encoded strings and decoder logic prevent reliable assessment from the inspected excerpts. No concrete attack was established, but the opaque reachable behavior remains unresolved and warrants manual review.
Evidence
dist/main.jsdist/mcp-tools.jsdist/commands/forecast.jspackage.jsonbin/cli.js
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The CLI entrypoint loads `dist/main.js` when invoked.
- `dist/main.js`, `dist/mcp-tools.js`, and `dist/commands/forecast.js` begin with encoded string tables and decoder logic that obscure their runtime behavior.
- The manifest's `prepublishOnly` hook runs tests and a build; no install-time hook is declared.
Evidence against
- The inspected source did not establish a concrete malicious action, credential transfer, or network recipient.
- The manifest's `prepublishOnly` command is limited to tests and building.
Behavioral surface
DynamicRequireEnvironmentVars
MinifiedPossibleObfuscation
NoLicense
Source & flagged code
7 flaggedbin/cli.jsView file
2try {
L3: require('../dist/main');
L4: } catch (e) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/cli.jsView on unpkg · L23require('../dist/main');
} catch (e) {
if (e.code === 'MODULE_NOT_FOUND' && e.message.includes('dist/main')) {
require('../src/main');
} else {
throw e;
}
}
Low
dist/mcp-tools.jsView file
1(function(_0x58e091,_0x3e3395){function _0x5bc02d(_0x107dbc,_0x121699){return a0_0x3bdd(_0x107dbc-0xc,_0x121699);}function _0x112f44(_0x130e96,_0x15249d){return a0_0x3bdd(_0x130e96...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp-tools.jsView on unpkg · L1Findings
2 High3 Medium7 Low
HighObfuscated Payload Loaderdist/mcp-tools.js
HighSemantic Analysis Limiteddist/commands/forecast.js#virtual:normalized:round1
MediumDynamic Requirebin/cli.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowNo License
LowAi Review Evidencepackage.json
LowAi Review Evidencebin/cli.js
LowAi Review Evidencedist/main.js
LowAi Review Evidencedist/mcp-tools.js
Affected versions and remediation
This report applies to numbors@1.6.0.
See all versions of numbors for other recorded verdicts.
- Review the evidence and your use of numbors@1.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.