registry / @addai/node / 0.5.1

@addai/node@0.5.1

Daemon that pairs a machine with your +Ai account and runs Claude / Codex / Kimi / Gemini agents on its behalf. Reachable via Supabase from Vault, Entity Studio, or any other +Ai surface.

AI Security Review

scanned 16d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs ainode and completes the pairing flow; then queued runtime requests arrive.

Impact

A compromised or over-authorized paired service could cause high-privilege AI-agent actions on the host.

Mechanism

Paired RPC polling, local AI-agent spawning, and permission-config mutation.

Rationale

The package is not conclusively malicious, but it deliberately provides a high-impact remotely dispatched AI-agent control capability and suppresses an agent safety prompt at runtime. Its lifecycle hook is narrowly scoped to repairing node-pty permissions.

Evidence

package.jsonscripts/fix-pty-helper.jsdist/index.jsdist/claude-config.jsdist/claude-spawn.jsdist/codex-spawn.jsdist/request-pump.jsdist/command-runner.jsdist/config.js~/.ainode/state.json~/.claude/settings.json~/.claude.jsonnode-pty spawn-helper

Network endpoints2

/rest/v1/rpc/*

@addai/node@0.5.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code