tnega@0.4.23
A minimal agent harness with spacetime-composable plugin lifecycles.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe manifest has no registry-install lifecycle hook, so its self-dependency does not create the specified automatic nested install chain. Reviewed agent-related reads and skill tooling do not establish unconsented control-surface mutation or remote code execution.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Normal package use; remote skill handling requires an explicit tool invocation with a supplied source.
Impact
No confirmed malicious effect or attack surface was established.
Mechanism
The package reads workspace approval guidance and handles skill content through its installation tool. The inspected code does not establish an automatic install-time mutation or execution chain.
AI rationale
The manifest has no registry-install lifecycle hook, so its self-dependency does not create the specified automatic nested install chain. Reviewed agent-related reads and skill tooling do not establish unconsented control-surface mutation or remote code execution.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines only a prepublishOnly test command; it has no preinstall, install, or postinstall hook.
- The runtime dependency on tnega@^0.1.1 is present, but no registry-install lifecycle trigger activates a nested release chain.
- The three runtime files read workspace AGENTS.md as approval constraints; the inspected code does not write agent configuration.
- Remote skill installation is exposed as a user-invoked tool that takes a source argument and processes skill content.
- The flagged browser bundle’s dynamic function construction is in a setImmediate compatibility shim; the VBScript asset begins with formula-parsing code.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetry
Source & flagged code
17 flaggeddist/tools.jsView file
1725// packages/execution/src/index.ts
L1726: import { spawn, spawnSync } from "node:child_process";
L1727:
High
2025while ($queue.Count) { $p = $queue.Dequeue(); foreach ($c in $all) { if ($c.ParentProcessId -eq $p -and $c.ProcessId -ne $p) { $queue.Enqueue($c.ProcessId); Stop-Process -Id $c.Pro...
L2026: const root32 = process.env.SystemRoot ?? "C:\\Windows";
L2027: await new Promise((resolve4) => {
L2028: const sweeper = spawn(`${root32}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`, [
L2029: "-NoLogo",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/tools.jsView on unpkg · L2025dist/web/assets/exceljs.min-IMLY4B9p.jsView file
9`))},S.constants={DH_CHECK_P_NOT_SAFE_PRIME:2,DH_CHECK_P_NOT_PRIME:1,DH_UNABLE_TO_CHECK_GENERATOR:4,DH_NOT_SUITABLE_GENERATOR:8,NPN_ENABLED:1,ALPN_ENABLED:1,RSA_PKCS1_PADDING:1,RSA...
L10: \0`,et+=u(Y,2),et+=b.magic,et+=u(M,2),et+=u(v,2),et+=u(V.crc32,4),et+=u(V.compressedSize,4),et+=u(V.uncompressedSize,4),et+=u(y.length,2),et+=u(j.length,2),{fileRecord:N.LOCAL_FILE...
L11: Use Chrome, Firefox or Internet Explorer 11`)}}).call(this)}).call(this,s("_process"),typeof Kt<"u"?Kt:typeof self<"u"?self:typeof window<"u"?window:{})},{_process:467,"safe-buffer...
Findings
2 Critical10 High7 Medium7 Low
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/tools.js
HighEvaldist/web/assets/exceljs.min-IMLY4B9p.js
HighSame File Env Network Executiondist/tools.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighRemote Agent Bridgedist/index.js
HighCross File Remote Execution Contextdist/bin.js
HighSemantic Analysis Limiteddist/cli-runtime.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to tnega@0.4.23.
See all versions of tnega for other recorded verdicts.
- Review the evidence and your use of tnega@0.4.23 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.