registry / nur-cli / 0.29.2

nur-cli@0.29.2

NurCLI - fully loaded multi-provider coding agent (TUI, vision, tools, sandbox, skills). One command installs the native binary: npx nur-cli

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

On npm postinstall, the shim downloads an unverified native executable, saves it in the user home directory, and runs its install command. The downloaded payload is outside the inspected package source.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install of nur-cli when the target binary is absent

Impact

A mutable GitHub Release payload receives the installing user's privileges and can perform uninspectable setup.

Mechanism

remote native-binary download, home-directory write, and execution

AI rationale

The package is an explicit remote executable bootstrapper at install time, creating a real unverified payload risk. Source inspection does not establish malicious behavior by the package author itself.

Evidence

package.jsonbin.jsREADME.md~/.local/bin/nur%USERPROFILE%\.local\bin\nur.exe

Network endpoints2

github.com/nuroctane/nur-cli/releases/latest/downloadgithub.com/nuroctane/nur-cli/releases/download/v0.29.2

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

postinstall invokes the downloader automatically.
Downloader fetches a latest GitHub Release binary without a checksum or signature check.
It writes the downloaded binary under the user home directory and executes `nur install` during postinstall.
README states the invoked binary provisions ecosystem packs and browser tooling, but that binary is not inspectable in this package.

Evidence against

Package source contains only a small zero-dependency shim and README.
Network target is an explicit repository-aligned GitHub Releases path.
No credential harvesting, exfiltration, obfuscation, eval, or agent-config writes appear in the inspected JavaScript.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 5.32 KB of source, external domains: github.com

Source & flagged code

4 flagged

package.jsonView file

Lines 10-34json

10 "homepage": "https://www.nuroctane.xyz/cli",

11 "keywords": [

12 "nur",

13 "nurcli",

14 "ai",

15 "agent",

16 "coding-agent",

17 "cli",

18 "tui"

19 ],

20 "bin": {

21 "nur-cli": "bin.js"

22 },

23 "files": [

24 "bin.js",

25 "README.md"

26 ],

27 "engines": {

28 "node": ">=18"

29 },

30 "scripts": {

31 "postinstall": "node bin.js --ensure || exit 0"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L31

32 }

Medium

Suspicious Lifecycle Evidence

postinstall invokes the downloader automatically.

package.jsonView on unpkg · L30

33}

bin.jsView file

Lines 107-147javascript

107

108 let buf = null;

109 let lastErr = null;

110 let picked = null;

111 for (

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin.js --ensure || exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin.js --ensure || exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

30"scripts": { "postinstall": "node bin.js --ensure || exit 0" }

Medium

Suspicious Lifecycle Evidence

postinstall invokes the downloader automatically.

package.jsonView on unpkg · L30

bin.jsView file

127const dest = installedBinaryPath(); fs.writeFileSync(dest, buf); if (asset.execBit) fs.chmodSync(dest, 0o755); process.stdout.write(`nur-cli: installed ${dest}\n`); return dest; } function runNurInstall(bin) { // Full one-stop install: PATH wiring, prereqs, ecosystem packs, browser. // The binary owns all of it - same as double-clicking a release EXE. const r = spawnSync(bin, ["install"], { stdio: "inherit" });

Medium

Suspicious Lifecycle Evidence

It writes the downloaded binary under the user home directory and executes `nur install` during postinstall.

bin.jsView on unpkg · L127

Findings

1 High5 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumSuspicious Lifecycle Evidencepackage.json

MediumSuspicious Lifecycle Evidencebin.js

LowScripts Present

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to nur-cli@0.29.2.

See version security history for other recorded verdicts.

Review the evidence and your use of nur-cli@0.29.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-22 03:12:11.925Z (UTC).