registry / @aggroot-team/aggroot / 1.11.1
@aggroot-team/aggroot@1.11.1
Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has no npm lifecycle hook, and the runtime installer is not automatically invoked. The static flags map to a CLI heap wrapper, a standalone Playwright helper, a tokenizer test, and bundled third-party web code rather than concrete malicious behavior.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
User explicitly runs the CLI or a helper script.
Impact
No automatic install-time mutation, credential theft, or exfiltration was confirmed.
Mechanism
User-invoked assistant and browser-install functionality.
AI rationale
The package has no npm lifecycle hook, and the runtime installer is not automatically invoked. The static flags map to a CLI heap wrapper, a standalone Playwright helper, a tokenizer test, and bundled third-party web code rather than concrete malicious behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The CLI respawns its own bundled entrypoint with a larger heap.
- A standalone browser helper can invoke Playwright's Chromium installer through a shell.
- A tokenizer test contains a fixed local shell-command string but only tokenizes it.
- The flagged web asset identifies bundled MIT-licensed jQuery event code.
- The manifest exposes a CLI and has no npm lifecycle hook.
Evidence against
- No preinstall, install, postinstall, or prepare hook is declared.
- No self-dependency is declared.
- The browser downloader is not wired to an install lifecycle.
- No source evidence showed credential harvesting or secret exfiltration.
- No confirmed foreign AI-agent configuration mutation was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
10 flaggeddist/cli.cjsView file
4const path = require('node:path');
L5: const { spawn } = require('node:child_process');
L6: const heapLimitMB = Math.round(v8.getHeapStatistics().heap_size_limit / 1024 / 1024);
High
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2scripts/install-browsers.mjsView file
89stdio: "inherit",
L90: shell: true,
L91: env,
High
Shell
Package source references shell execution.
scripts/install-browsers.mjsFindings
5 High9 Medium5 Low
HighChild Processdist/cli.cjs
HighShellscripts/install-browsers.mjs
HighRuntime Package Installscripts/install-browsers.mjs
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/cytoscape.esm-LDYqcvCF.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.11.1.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.11.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.