rakumux@0.1.37
Terminal session manager for coding agents, with a fast TUI, a background session daemon and an MCP server
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s install hook sets up its own launchers and binaries, consistent with its stated purpose. However, TUI startup triggers an undisclosed, daily background request for the latest package version, so this is suspicious runtime telemetry.
Static reason
One or more suspicious static signals were detected.
Trigger
Opening the TUI, at most once per day.
Impact
Exposes a registry request associated with TUI use; no collection of credentials or machine details was identified.
Mechanism
A background script runs npm view rakumux version and records a timestamp in the user’s cache directory.
AI rationale
The package’s install hook sets up its own launchers and binaries, consistent with its stated purpose. However, TUI startup triggers an undisclosed, daily background request for the latest package version, so this is suspicious runtime telemetry.
Evidence
resources/scripts/rakumux.shresources/scripts/shell/gwr_binary.shresources/scripts/shell/gwr/check-updates.shREADME.md${HOME}/.cache/rakumux/last_update_check
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Opening the TUI starts a silent background update check; subcommands skip it.
- The check runs at most once per day and stores its timestamp under ~/.cache/rakumux/last_update_check.
- The update check queries npm for the latest rakumux version; this runtime network activity is not disclosed in the README.
Evidence against
- The postinstall hook sets up the package’s own scripts and platform binaries in dist/.
- The package describes itself as a terminal session manager and documents its launcher commands.
- The inspected update check requests a package version and does not show collection of credentials or machine details.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
UrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkginstall.jsView file
12// (rakumux-mcp, rakumux-api: no launcher, and nothing but the binary may
L13: // write to stdout, which carries MCP messages).
L14: //
...
L17:
L18: const { execSync, spawnSync } = require('child_process');
L19: const fs = require('fs');
...
L47:
L48: const packageRoot = __dirname;
L49: const resourcesDir = path.join(packageRoot, 'resources');
...
L122: function platformKey() {
L123: return `${process.platform}-${process.arch}`;
L124: }
High
Sandbox Evasion Gated Capability
Findings
2 High7 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilityinstall.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Native Binaryresources/prebuilt/macos-intel/rakumux-ptyd
MediumShips Build Helperresources/scripts/rakumux.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidenceresources/scripts/rakumux.sh
MediumAi Review Evidenceresources/scripts/shell/gwr_binary.sh
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to rakumux@0.1.37.
See all versions of rakumux for other recorded verdicts.
- Review the evidence and your use of rakumux@0.1.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.