tnega@0.4.24
A minimal agent harness with spacetime-composable plugin lifecycles.
AI Security Review
scanned 22d ago · by lpm-firewall-aiSource inspection did not confirm the scanner's malicious indicators as attack behavior. The package has no consumer install lifecycle trigger, and the inspected runtime and bundled-library excerpts are consistent with the package's agent and document tooling.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Consumer installation does not run the package's prepublish-only hook.
Impact
No confirmed attack effect was established.
Mechanism
The inspected runtime targets format errors, log events, read workspace approval guidance, and expose a Markdown skill installation tool.
AI rationale
Source inspection did not confirm the scanner's malicious indicators as attack behavior. The package has no consumer install lifecycle trigger, and the inspected runtime and bundled-library excerpts are consistent with the package's agent and document tooling.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has a prepublish-only hook, not a consumer install hook; its self-dependency alone does not start the nested lifecycle chain.
- The indicated runtime-operation locations handle errors, JSON operations, and event logging; these excerpts do not establish an attack.
- The agent configuration targets read workspace approval guidance into runtime constraints; the inspected code does not mutate that file.
- The skill installer is an explicit tool for Markdown instructions, limits remote sources to HTTPS, and rejects embedded credentials.
- The flagged evaluation expression appears after an unconditional return in its function.
- The flagged web assets are bundled archive, presentation, and syntax-language modules.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
18 flaggeddist/tools.jsView file
1725// packages/execution/src/index.ts
L1726: import { spawn, spawnSync } from "node:child_process";
L1727:
High
2025while ($queue.Count) { $p = $queue.Dequeue(); foreach ($c in $all) { if ($c.ParentProcessId -eq $p -and $c.ProcessId -ne $p) { $queue.Enqueue($c.ProcessId); Stop-Process -Id $c.Pro...
L2026: const root32 = process.env.SystemRoot ?? "C:\\Windows";
L2027: await new Promise((resolve4) => {
L2028: const sweeper = spawn(`${root32}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`, [
L2029: "-NoLogo",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/tools.jsView on unpkg · L2025dist/web/assets/jszip.min--CgF4dSE.jsView file
1import{b as vt,g as Bt}from"./index-CalLtUj7.js";import{c as yt}from"./_commonjs-dynamic-modules-TDtrdbi3.js";function Rt(ct,wt){for(var _=0;_<wt.length;_++){const N=wt[_];if(typeo...
L2: \0`,G+=l(E,2),G+=D.magic,G+=l(v,2),G+=l(S,2),G+=l(J.crc32,4),G+=l(J.compressedSize,4),G+=l(J.uncompressedSize,4),G+=l(j.length,2),G+=l(T.length,2),{fileRecord:p.LOCAL_FILE_HEADER+G...
Findings
2 Critical11 High7 Medium7 Low
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/tools.js
HighEvaldist/web/assets/jszip.min--CgF4dSE.js
HighSame File Env Network Executiondist/tools.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighRemote Agent Bridgedist/index.js
HighCross File Remote Execution Contextdist/bin.js
HighSemantic Analysis Limiteddist/cli-runtime.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to tnega@0.4.24.
See all versions of tnega for other recorded verdicts.
- Review the evidence and your use of tnega@0.4.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.