Loading npm security reports…

nur-cli@0.38.3: Suspicious npm security report (Warn) | LPM Firewall

registry / nur-cli / 0.38.3

nur-cli@0.38.3

NurCLI - fully loaded multi-provider coding agent (TUI, vision, tools, sandbox, skills). One command installs the native binary: npx nur-cli

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Installing the package runs a postinstall shim that downloads an unpinned native binary from the package GitHub releases and executes it with the install argument. The binary body is not in this package, so later setup cannot be verified from the published JavaScript.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall invokes node bin.js --ensure. Direct execution of the bin entry also downloads and runs the binary.

Impact

Install-time execution of publisher-controlled native code and a persistent local binary. Further PATH or agent-stack changes would happen inside that opaque binary.

Mechanism

The script GETs a platform asset from github.com/nuroctane/nur-cli releases, follows redirects, writes the file under the user install directory, and spawnSync launches it with install.

AI rationale

The postinstall hook downloads an unpinned native release and executes it, which is install-time remote code execution even though the URL matches the declared repository. The published JavaScript shows no secret theft or foreign agent-config writes, so the opaque binary is a dangerous installer capability rather than a proven malware payload.

Evidence

package.jsonbin.js~/.local/bin/nur~/.local/bin/nur.exe

Network endpoints1

github.com/nuroctane/nur-cli/releases/

Decision evidence

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin.js --ensure || exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin.js --ensure || exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

30"scripts": { "postinstall": "node bin.js --ensure || exit 0" } }

Medium

Suspicious Lifecycle Evidence

npm postinstall runs node bin.js --ensure and ignores failure with exit 0.

package.jsonView on unpkg · L30

bin.jsView file

•matchType = normalized_sha256 matchedPackage = nur-cli@0.36.8 matchedPath = bin.js matchedIdentity = npm:bnVyLWNsaQ:0.36.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = b921eac94efd58ac signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = nur-cli@0.36.8 matchedPath = bin.js matchedIdentity = npm:bnVyLWNsaQ:0.36.8 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin.jsView on unpkg

100const versions = ["latest/download", `download/v${FALLBACK_VERSION}`]; const urls = []; for (const v of versions) { for (const name of asset.names) { urls.push(`htt

Medium

Ai Review Evidence

The shim downloads an unpinned GitHub Releases asset named latest, then falls back to v0.31.0, with only a one-megabyte size check.

bin.jsView on unpkg · L100

123if (buf.length < 1000000) { fail(`downloaded asset too small (${buf.length} bytes) - aborting`); } const dest = installedBinaryPath(); fs.writeFile

Medium

Ai Review Evidence

The shim downloads an unpinned GitHub Releases asset named latest, then falls back to v0.31.0, with only a one-megabyte size check.

bin.jsView on unpkg · L123