registry / seediment / 0.1.2

seediment@0.1.2

Keeps your server tidy and gives you a map of it — built for the mess AI coding agents leave behind.

AI Security Review

scanned 5h ago · by lpm-firewall-ai

The CLI launcher delegates all behavior to opaque OS-specific native binaries that were not present in this package extraction. No confirmed exfiltration, persistence, or install-time mutation exists in the inspected source.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the seediment command.

Impact

The uninspected native payload receives all CLI arguments and may act on local files.

Mechanism

dynamic platform-binary resolution and native binary execution

Rationale

No concrete malicious behavior is present in the inspected manifest or launcher, but the package is a carrier for uninspectable native payloads. Flag for warning rather than block because execution is user-invoked and there are no lifecycle hooks or confirmed attack actions.

Evidence

package.jsonbin/seediment.cjsREADME.md@seediment/linux-x64/seediment@seediment/darwin-arm64/seediment@seediment/darwin-x64/seediment@seediment/win32-x64/seediment.exe

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

seediment@0.1.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code