tnega@0.5.1
A minimal agent harness with spacetime-composable plugin lifecycles.
AI Security Review
scanned 21d ago · by lpm-firewall-aiInspected source does not establish unconsented install mutation, credential disclosure, or another concrete attack. The scanner hints resolve to package-aligned runtime and frontend code, while the self-dependency has no install lifecycle trigger.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
No unconsented install-time trigger was found; runtime features are used through the package's agent or CLI functionality.
Impact
No attack impact was established.
Mechanism
The inspected agent locations read workspace constraints, runtime hints handle errors or event logs, and the frontend flags identify parser and preview code.
AI rationale
Inspected source does not establish unconsented install mutation, credential disclosure, or another concrete attack. The scanner hints resolve to package-aligned runtime and frontend code, while the self-dependency has no install lifecycle trigger.
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json lists a prepublishOnly test command and a tnega self-dependency, with no preinstall, install, or postinstall hook.
- The targeted agent code reads workspace AGENTS.md as constraints and treats a missing file as empty; these locations do not mutate agent settings.
- The runtime hints resolve to error-stack handling and JSONL event logging in project-loop, not account actions.
- The flagged frontend assets contain SQL and VBScript tokenizers and preview bundles; ExcelJS constructs a string Function in a setImmediate polyfill.
- The execution sandbox rejects HTTP destinations that resolve to private or reserved addresses.
- The plugin-development description says host-process plugin code needs approval and that failed imports or mounts are rolled back.
Evidence against
- The package includes agent execution and plugin-development capabilities, including a string Function call in a bundled browser polyfill.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
19 flaggeddist/tools.jsView file
1731// packages/execution/src/index.ts
L1732: import { spawn, spawnSync } from "node:child_process";
L1733:
High
2031while ($queue.Count) { $p = $queue.Dequeue(); foreach ($c in $all) { if ($c.ParentProcessId -eq $p -and $c.ProcessId -ne $p) { $queue.Enqueue($c.ProcessId); Stop-Process -Id $c.Pro...
L2032: const root32 = process.env.SystemRoot ?? "C:\\Windows";
L2033: await new Promise((resolve4) => {
L2034: const sweeper = spawn(`${root32}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`, [
L2035: "-NoLogo",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/tools.jsView on unpkg · L2031dist/web/assets/exceljs.min-C_IgtxyP.jsView file
9`))},S.constants={DH_CHECK_P_NOT_SAFE_PRIME:2,DH_CHECK_P_NOT_PRIME:1,DH_UNABLE_TO_CHECK_GENERATOR:4,DH_NOT_SUITABLE_GENERATOR:8,NPN_ENABLED:1,ALPN_ENABLED:1,RSA_PKCS1_PADDING:1,RSA...
L10: \0`,et+=u(Y,2),et+=b.magic,et+=u(M,2),et+=u(v,2),et+=u(V.crc32,4),et+=u(V.compressedSize,4),et+=u(V.uncompressedSize,4),et+=u(y.length,2),et+=u(j.length,2),{fileRecord:N.LOCAL_FILE...
L11: Use Chrome, Firefox or Internet Explorer 11`)}}).call(this)}).call(this,s("_process"),typeof Kt<"u"?Kt:typeof self<"u"?self:typeof window<"u"?window:{})},{_process:467,"safe-buffer...
Findings
3 Critical12 High7 Medium7 Low
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/execution-sandbox.js
HighChild Processdist/tools.js
HighShell
HighEvaldist/web/assets/exceljs.min-C_IgtxyP.js
HighSame File Env Network Executiondist/tools.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighRemote Agent Bridgedist/index.js
HighCross File Remote Execution Contextdist/bin.js
Affected versions and remediation
This report applies to tnega@0.5.1.
See all versions of tnega for other recorded verdicts.
- Review the evidence and your use of tnega@0.5.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.