tnega@0.5.3
A minimal agent harness with spacetime-composable plugin lifecycles.
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection found no malicious behavior. The publish-only test hook, older self-dependency, configured model requests, and flagged tokenizer and browser modules do not establish an attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The CLI starts when a user invokes the package command; no install-time attack trigger was found.
Impact
No confirmed malicious impact was identified.
Mechanism
No malicious mechanism was established. Inspected runtime code handles session events, model requests, language tokenization, and protocol support.
AI rationale
Source inspection found no malicious behavior. The publish-only test hook, older self-dependency, configured model requests, and flagged tokenizer and browser modules do not establish an attack.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has a publish-only test hook and a runtime dependency on an older tnega release; that release also has only a publish-only test hook.
- The CLI is exposed as a command, and the reviewed runtime excerpts show session-event writes, error-stack handling, and loop detection.
- Model requests use a selected or configured route and send its key to that route’s base URL; no unrelated package-selected recipient was found.
- The flagged SQL and VBScript assets contain language-tokenizer code, and the other cited browser and dependency files are bundled application or protocol modules.
Evidence against
- The scanner’s install-time concern is not supported by the manifests: neither release declares a consumer install hook.
- The high-similarity asset matches are consistent with SQL and VBScript language support; the inspected code parses language tokens.
- The CLI’s authenticated requests follow configured model routes, while the inspected runtime excerpts show application behavior rather than an independent collection or persistence mechanism.
Behavioral surface
Source & flagged code
19 flaggeddist/tools.jsView file
1731// packages/execution/src/index.ts
L1732: import { spawn, spawnSync } from "node:child_process";
L1733:
High
2031while ($queue.Count) { $p = $queue.Dequeue(); foreach ($c in $all) { if ($c.ParentProcessId -eq $p -and $c.ProcessId -ne $p) { $queue.Enqueue($c.ProcessId); Stop-Process -Id $c.Pro...
L2032: const root32 = process.env.SystemRoot ?? "C:\\Windows";
L2033: await new Promise((resolve4) => {
L2034: const sweeper = spawn(`${root32}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`, [
L2035: "-NoLogo",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/tools.jsView on unpkg · L2031dist/web/assets/exceljs.min-Crnlk5nY.jsView file
9`))},S.constants={DH_CHECK_P_NOT_SAFE_PRIME:2,DH_CHECK_P_NOT_PRIME:1,DH_UNABLE_TO_CHECK_GENERATOR:4,DH_NOT_SUITABLE_GENERATOR:8,NPN_ENABLED:1,ALPN_ENABLED:1,RSA_PKCS1_PADDING:1,RSA...
L10: \0`,et+=u(Y,2),et+=b.magic,et+=u(M,2),et+=u(v,2),et+=u(V.crc32,4),et+=u(V.compressedSize,4),et+=u(V.uncompressedSize,4),et+=u(y.length,2),et+=u(j.length,2),{fileRecord:N.LOCAL_FILE...
L11: Use Chrome, Firefox or Internet Explorer 11`)}}).call(this)}).call(this,s("_process"),typeof Kt<"u"?Kt:typeof self<"u"?self:typeof window<"u"?window:{})},{_process:467,"safe-buffer...
Findings
3 Critical12 High7 Medium7 Low
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/bin.js
HighChild Processdist/tools.js
HighShell
HighEvaldist/web/assets/exceljs.min-Crnlk5nY.js
HighSame File Env Network Executiondist/tools.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighRemote Agent Bridgedist/index.js
HighCross File Remote Execution Contextdist/bin.js
Affected versions and remediation
This report applies to tnega@0.5.3.
See all versions of tnega for other recorded verdicts.
- Review the evidence and your use of tnega@0.5.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.