registry / nur-cli / 0.38.1

nur-cli@0.38.1

NurCLI - fully loaded multi-provider coding agent (TUI, vision, tools, sandbox, skills). One command installs the native binary: npx nur-cli

AI Security Review

scanned 16d ago · by lpm-firewall-ai

Installing nur-cli runs a postinstall shim that downloads an unsigned native binary from GitHub Releases and executes it. The channel is the moving latest release, with an older fallback tag, and redirects are followed without a signature check.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall runs node bin.js --ensure. A direct invocation of the nur-cli binary does the same download and install without the already-present skip.

Impact

A replaced or redirected release asset would execute as a native process with the installing user's privileges. The JavaScript shim itself does not read or send credentials.

Mechanism

The shim GETs a platform asset from github.com/nuroctane/nur-cli releases, follows redirects, writes the body into the user install directory, sets the executable bit, and spawnSyncs that file with the install argument.

AI rationale

The postinstall hook downloads an unpinned, unsigned native binary from the package's own GitHub release channel and executes it, which is a real install-time code-execution capability. The same path is the documented first-party CLI installer and shows no credential theft or hidden payload in the shim, so it warrants a warning rather than a publish block.

Evidence

package.jsonbin.js~/.local/bin/nur

Network endpoints1

github.com/nuroctane/nur-cli/releases/

nur-cli@0.38.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code