tnega@0.5.2
⚠ Under reviewA minimal agent harness with spacetime-composable plugin lifecycles.
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe inspected manifest has no install-time lifecycle hook, and the older self-dependency release also uses prepublishOnly. Review remains unresolved because the declared playwright-core dependency is loaded by browser functionality but its source was unavailable for inspection.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The command-line program runs when invoked; browser functionality dynamically loads playwright-core.
Impact
The available evidence does not establish an attack or its impact.
Mechanism
The dependency source was not available in the prepared snapshot, so its behavior could not be assessed.
AI rationale
The inspected manifest has no install-time lifecycle hook, and the older self-dependency release also uses prepublishOnly. Review remains unresolved because the declared playwright-core dependency is loaded by browser functionality but its source was unavailable for inspection.
Evidence
package.jsondist/bin.js
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package declares playwright-core as a dependency, and the command-line bundle dynamically imports it for browser functionality; its source was unavailable for inspection in this snapshot.
- The manifest defines prepublishOnly, with no install-time lifecycle hook shown.
Evidence against
- The inspected older self-dependency manifest also defines prepublishOnly rather than an install-time hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
19 flaggeddist/tools.jsView file
1731// packages/execution/src/index.ts
L1732: import { spawn, spawnSync } from "node:child_process";
L1733:
High
2031while ($queue.Count) { $p = $queue.Dequeue(); foreach ($c in $all) { if ($c.ParentProcessId -eq $p -and $c.ProcessId -ne $p) { $queue.Enqueue($c.ProcessId); Stop-Process -Id $c.Pro...
L2032: const root32 = process.env.SystemRoot ?? "C:\\Windows";
L2033: await new Promise((resolve4) => {
L2034: const sweeper = spawn(`${root32}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`, [
L2035: "-NoLogo",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/tools.jsView on unpkg · L2031dist/web/assets/jszip.min-CFWkq-Nr.jsView file
1import{b as vt,g as Bt}from"./index-CNH60PGs.js";import{c as yt}from"./_commonjs-dynamic-modules-TDtrdbi3.js";function Rt(ct,wt){for(var _=0;_<wt.length;_++){const N=wt[_];if(typeo...
L2: \0`,G+=l(E,2),G+=D.magic,G+=l(v,2),G+=l(S,2),G+=l(J.crc32,4),G+=l(J.compressedSize,4),G+=l(J.uncompressedSize,4),G+=l(j.length,2),G+=l(T.length,2),{fileRecord:p.LOCAL_FILE_HEADER+G...
Findings
3 Critical12 High7 Medium7 Low
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/bin.js
HighChild Processdist/tools.js
HighShell
HighEvaldist/web/assets/jszip.min-CFWkq-Nr.js
HighSame File Env Network Executiondist/tools.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighRemote Agent Bridgedist/index.js
HighCross File Remote Execution Contextdist/bin.js
Affected versions and remediation
This report applies to tnega@0.5.2.
See all versions of tnega for other recorded verdicts.
- Review the evidence and your use of tnega@0.5.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.