Loading npm security reports…

thenux-cli@1.0.1: Suspicious npm security report (Warn) | LPM Firewall

registry / thenux-cli / 1.0.1

thenux-cli@1.0.1

Autonomous AI development agent for the terminal, powered by THENUX AI

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No install-time mutation or hidden steal-and-send path is present. After the user runs the THENUX CLI, product keys go to the package default model API and GitHub tokens go to GitHub. Scanner hits for environment access, network, and shell are the documented agent, not a separate attack chain.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

The user installs the package and runs the thenux or thenux-cli command.

Impact

No confirmed covert credential theft or unconsented install-time compromise.

Mechanism

User-invoked coding agent talking to its own THENUX API

AI rationale

Inspected source is a user-run THENUX coding CLI: no registry install hooks, THENUX-format keys sent to the package default Worker API, and GitHub tokens used only against api.github.com. Scanner exfiltration and malware-similarity labels follow that dual-use agent plus network pattern, not a hidden harvest chain.

Decision evidence

public snapshot

AI called this Clean at 76.0% confidence as Benign with medium false-positive risk.

Why the final policy warns

The AI recommended clean, but the final policy action is warn. This report does not record a matching static-policy override reason.

Evidence for AI clean decision

package.json has no preinstall, install, or postinstall hook; the only lifecycle script is prepublishOnly running a local build.

Source & flagged code

15 flagged · loading source

dist/index.jsView file

1#!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&...

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L1

1#!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&... ... L39: L40: `):""}};var ys={name:"manage_memory",description:"Store or recall architectural decisions, project conventions, user preferences, or important notes in THENUX memory.",riskLevel:"S... L41: #### Hea

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L1

1Trigger-reachable chain: scripts.start -> dist/index.js L1: #!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&... ... L39: L40: `):""}};var ys={name:"manage_memory",description:"Store or recall architectural decisions, project conventions, user preferences, or importan

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L1

1858patternName = google_api_key severity = high line = 1858

High

High Secret

Package contains a high-severity secret pattern.

dist/index.jsView on unpkg · L1858

1#!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

26`);return {filePath:a,totalLines:c,startLine:l,endLine:d,content:p,rawContent:m.join(` L27: `)}}catch(i){throw new Error(`Cannot read file "${a}": ${i.message}`)}}},ns={name:"write_file",description:"Write complete content to a file. Overwrites existing files or creates n... L28: Reason: ${i.reason}`,i.level))return {command:a,status:"rejected",message:"Command execution cancelled by user."};if(s.dryRun)return {command:a,riskLevel:i.level,status:"simulated ...

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L26

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&... ${i}`:d;}i&&(s.system_prompt=i),t.messages&&t.messages.length>0&&(s.messages=t.messages.filter(d=>d.role!=="system").map(d=>({role:d.role==="assistant"?"assistant":"user",content:d... ${c}`:m;}c&&(r.system_prompt=c),t.messages&&t.messages.length>0&&(r.messages

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

1#!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

1#!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&... ... L39: L40: `):""}};var ys={name:"manage_memory",description:"Store or recall architectural decisions, project conventions, user preferences, or important notes in THENUX memory.",riskLevel:"S... L41: #### Hea

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L1

1#!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... ... L1326: `:""} L1327: AVAILABLE TOOLS: L1328:

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/index.jsView on unpkg · L1

1Trigger-reachable credential exfiltration chain: scripts.start -> dist/index.js L1: #!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&... ... L39: L40: `):""}};var ys={name:"manage_memory",description:"Store or recall architectural decisions, project conventions, user

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.js L1: #!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = thenux-cli@1.0.0 matchedPath = dist/index.js matchedIdentity = npm:dGhlbnV4LWNsaQ:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = bf135c46f5583b7f signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = thenux-cli@1.0.0 matchedPath = dist/index.js matchedIdentity = npm:dGhlbnV4LWNsaQ:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/index.jsView on unpkg

1858patternName = google_api_key severity = high line = 1858

High

Secret Pattern

Google API key in dist/index.js

dist/index.jsView on unpkg · L1858

Source & flagged code

15 flagged

dist/index.jsView file

Lines 1-46javascript

1#!/usr/bin/env node

2import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'process';import j from'chalk';import Qi from'ora';import ge from'fs/promises';import {exec,spawn,execSync}from'child_process';import {promisify}from'util';import Bs from'crypto';import {createTwoFilesPatch}from'diff';import wa from'http';import Pa from'readline';var Po="1.0.0",Jt=process.env.THENUX_API_BASE_URL||"https://thenux-kyrex-ai.scieovlogs12345.workers.dev",st=Jt,ye="t-nex-1.0",Io=["t-nex-cli","t-nex-1.0","t-nex ...

3`);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&(o+=p,t(p));}catch{}}}else if(typeof a.getReader=="function"){let i=a.getReader();for(;;){let{done:r,value:c}=await i.read();if(r)break;let l=n.decode(c,{stream:!0}),d=(s+l).split(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L1

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/index.jsView on unpkg · L1

4`);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&(o+=w,t(w));}catch{}}}i.releaseLock();}}catch{}return o}var Oo=Ji;var qn=/sorry,?\s*thenux\s*ai\s*could\s*not\s*generate\s*a\s*reply/i;function _o(a){let t=String(a||"").trim().toLowerCase();return t==="t-nex cli"||t==="t-nex-cli"?"t-nex-cli":t==="t-nex"||t==="t-nex 1.0"?"t-nex-1.0":t==="t-nex 2.0"?"t-nex-2.0":t==="t-nex prime"?"t-nex-prime":t==="t-nex ultra"?"t-nex-ultra":a}var F=class a{apiKey;baseUrl;timeout;const ...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

5Active Model: ${t.model} \u26A1

6Identity: You are strictly Thenux AI. You are NOT Gemini, Claude, or OpenAI. Never claim to be Gemini or any other model.

7Instructions:

8- Maintain conversation memory and remember details the user shares with you.

9- Always provide clear, direct, and production-ready responses.`;i=i?`${d}

10

11${i}`:d;}i&&(s.system_prompt=i),t.messages&&t.messages.length>0&&(s.messages=t.messages.filter(d=>d.role!=="system").map(d=>({role:d.role==="assistant"?"assistant"

12Active Model: ${o} \u26A1

13Identity: You are strictly Thenux AI. You are NOT Gemini, Claude, or OpenAI. Never claim to be Gemini or any other model.

14Instructions:

15- Maintain conversation memory and remember details the user shares with you.

16- Always provide clear, direct, and production-ready responses.`;c=c?`${m}

17

18${c}`:m;}c&&(r.system_prompt=c),t.messages&&t.messages.length>0&&(r.messages=t.messages.filter(m=>m.role!=="system").map(m=>({role:m.role==="assistant"?"assistant":"user",content:m.content})));let l;try{l=await fetch(i,{method:"POST",headers:this.getAuthHeaders(),body:JSON.stringify(r)});}catch{let p=await this.chat(t);return n(p),p}if(!l.ok||!l.body){let m=await this.chat(t);return n(m),m}let d=await Oo(l.body,n);if(qn.test(d)){let m=await this.chat(t);return n(m),m}return d}async getCloudChatMemory(t){try{let n=`${this.baseUrl}/api/chats/${encodeURIComponent(t)}/memory?api_key=${encodeURICom ...

19`);}else console.log(` ${e.success("\u25CF")} ${e.light("Connected to THENUX AI Autonomous Edge Network")}

20`);console.log(` ${e.muted("Model Core")} ${e.bold(e.white(o))} ${e.dim("\xB7")} ${e.success("READY")}`),console.log(` ${e.muted("Workspace")} ${e.light(n)}`),console.log(` ${e.muted("Active UI")} ${e.brand(s.toUpperCase())} ${e.dim("\xB7")} ${e.dim("Type /theme to change")}`),console.log(""),console.log(` ${e.dim("Quick Shortcuts:")} ${e.brand("/help")} ${e.dim("\xB7"

21 ${e.dim(i)}${e.dim(o)}${e.dim("\u2500\u2500")}

22`);}function Xo(){console.log(` ${e.dim("/help")} ${e.dim("/workspace")} ${e.dim("/theme")} ${e.dim("/browse")} ${e.dim("/play"

23`);}var E=class{spinner=null;set text(t){this.spinner&&(this.spinner.text=e.muted(t));}start(t){let n=t||"";return this.spinner?(n&&(this.spinner.text=e.muted(n)),this):(this.spinner=Qi({text:e.muted(n),prefixText:" ",spinner:{interval:80,frames:["\u25CC","\u25D0","\u25D3","\u25D1

24`)}async execute(t,n,o){let s=this.tools.get(t);if(!s)return {success:false,error:`Tool "${t}" is not registered in the toolset.`};let i=s.schema||s.parameters,r=i?i.safeParse(n):{success:true,data:n};if(!r.success){let c=r.error.errors.map(l=>`${l.path.join(".")}: ${l.message}`).join(", ");return {success:false,error:`Invalid parameters for

25`).map(i=>i.trim()).filter(i=>i&&!i.startsWith("#"));for(let i of s)this.patterns.

26`);return {filePath:a,totalLines:c,startLine:l,endLine:d,content:p,rawContent:m.join(`

27`)}}catch(i){throw new Error(`Cannot read file "${a}": ${i.message}`)}}},ns={name:"write_file",description:"Write complete content to a file. Overwrites existing files or creates new files if they do not exist.",riskLevel:"CAUTION",schema:z$1.object({filePath:z$1.string().describe("Relative path to the file"),content:z$1.

28Reason: ${i.reason}`,i.level))return {command:a,status:"rejected",message:"Command execution cancelled by user."};if(s.dryRun)return {command:a,riskLevel:i.level,status:"simulated (dry-run)"};let r=s.workspaceRoot;if(t){let l=Z.resolve(s.workspaceRoot,t);te.existsSync(l)&&te.statSync(l).isDirectory()&&(r=l);}let c=Date.now();try{let{stdout:l,stderr:d}=await lr(a,{cwd:r,timeout:n,maxBuffer:10485760,env:{...process.env,CI:"true",THENUX_AGENT:"true"}}),m=((Date.now()-c)/1e3).toFixed(1);return {command:a,cwd:r,exitCode:0,stdout:l.trim(),stderr:d.trim(),durationMs:Date.now()-c,formattedSummary:`Exe ...

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L26

29`):[];return {branch:o,clean:s.length===0,changedFilesCount:s.length,status:n||"Working tree clean"}}catch(n){return {available:false,error:n.message}}}},sn={name:"git_diff",description:"View current uncommitted changes (git diff) in the workspace.",riskLevel:"SAFE",schema:z$1.object({staged:z$1.boolean().default(false).describe("Whether to view staged changes (--cached)")}),execute:async({staged:a},t)=>{try{let o=await Zn(a?"diff --cached":"diff",t.workspaceRoot);return {hasDiff:o.length>0,diff:o||"No changes detected."}}catch(n){return {available:false,error:n.message}}}};var z=class{memoryF ...

30${t.customInstructions}`),t.conventions.length>0&&n.push(`Project Conventions:

31- ${t.conventions.join(`

32- `)}`),t.decisions.length>0&&n.push(`Architectural Decisions:

33- ${t.decisions.join(`

34- `)}`),t.importantMemories.length>0){let o=t.importantMemories.map(s=>`- [${s.type.toUpperCase()}]: ${s.content.replace(/\n+/g,

35`);n.push(`Important Memories from Earlier Conversation:

36${o}`);}return t.notes.length>0&&n.push(`Project Notes:

37- ${t.notes.join(`

38- `)}`),n.length>0?n.join(`

39

40`):""}};var ys={name:"manage_memory",description:"Store or recall architectural decisions, project conventions, user preferences, or important notes in THENUX memory.",riskLevel:"SAFE",schema:z$1.object({action:z$1.enum(["save","recall","clear"]).describe("Action to perform: save, recall, or clear"),content:z$1.string().optional().describe(

41#### Headings:

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L1

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L1

42${n.headings.map(s=>`- ${s}`).join(`

43`)}`:null,`

44#### Page Content Preview:

45${n.contentExcerpt}`,n.links.length>0&&!a.describeOnly?`

46#### Available Outgoing Links (${n.links.length}):

Long lines were clipped for display.

Lines 1838-1878javascript

1838 ${e.success("\u2714 Cloned into:")} ${e.bold(N(m.destinationPath))}`),console.log(` ${e.dim("Tip: Switched workspace to")} ${e.brand(N(m.destinationPath))}

1839`),m.destinationPath}catch(m){return d.fail(`Clone failed: ${m.message}`),null}}catch(s){return console.log(`

1840 ${e.danger

1Trigger-reachable chain: scripts.start -> dist/index.js L1: #!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&... ... L39: L40: `):""}};var ys={name:"manage_memory",description:"Store or recall architectural decisions, project conventions, user preferences, or importan

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L1

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&... ${i}`:d;}i&&(s.system_prompt=i),t.messages&&t.messages.length>0&&(s.messages=t.messages.filter(d=>d.role!=="system").map(d=>({role:d.role==="assistant"?"assistant":"user",content:d... ${c}`:m;}c&&(r.system_prompt=c),t.messages&&t.messages.length>0&&(r.messages

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

1Trigger-reachable credential exfiltration chain: scripts.start -> dist/index.js L1: #!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&... ... L39: L40: `):""}};var ys={name:"manage_memory",description:"Store or recall architectural decisions, project conventions, user

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.js L1: #!/usr/bin/env node L2: import {Command}from'commander';import te from'fs';import Z from'path';import Ce from'os';import {z as z$1}from'zod';import Tt from'readline/promises';import {stdout,stdin}from'pro... L3: `);s=c.pop()||"";for(let l of c){let d=l.trim();if(!(!d||d==="data: [DONE]")&&d.startsWith("data: "))try{let m=JSON.parse(d.slice(6).trim()),p=m.response||m.text||m.content||"";p&&... L4: `);s=d.pop()||"";for(let m of d){let p=m.trim();if(!(!p||p==="data: [DONE]")&&p.startsWith("data: "))try{let u=JSON.parse(p.slice(6).trim()),w=u.response||u.text||u.content||"";w&&...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = thenux-cli@1.0.0 matchedPath = dist/index.js matchedIdentity = npm:dGhlbnV4LWNsaQ:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = bf135c46f5583b7f signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = thenux-cli@1.0.0 matchedPath = dist/index.js matchedIdentity = npm:dGhlbnV4LWNsaQ:1.0.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/index.jsView on unpkg

1858patternName = google_api_key severity = high line = 1858

High

Secret Pattern

Google API key in dist/index.js

dist/index.jsView on unpkg · L1858