@aggroot-team/aggroot@1.11.15
Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malware or install-hook abuse was established, but the shipped auto-approved privileged agent profile is a real dangerous capability. It warrants a warning rather than a publication block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A user runs the aggroot CLI and uses the bundled coding agent.
Impact
A malicious prompt or model output could perform unreviewed local or remote actions within the user's available permissions.
Mechanism
Automatically approved shell, web, and SSH agent tools.
AI rationale
No concrete malware or install-hook abuse was established, but the shipped auto-approved privileged agent profile is a real dangerous capability. It warrants a warning rather than a publication block.
Evidence
dist/index.cjsshare/agents/agent-coder.jsondist/cli.cjs
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- A bundled agent profile uses automatic approval and grants shell, web, and SSH execution and write capabilities.
- The runtime maps an agent profile's auto approval setting to automatic approval.
- This is a powerful user-invoked AI coding assistant, so model or prompt failures could cause unreviewed local or remote actions.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The browser installer is shipped but is not referenced by an npm lifecycle hook.
- The flagged Cytoscape asset is a minified third-party-style web bundle; no payload execution was established from it.
- No credential harvesting or unconsented exfiltration path was confirmed.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
11 flaggeddist/cli.cjsView file
4const path = require('node:path');
L5: const { spawn } = require('node:child_process');
L6: const heapLimitMB = Math.round(v8.getHeapStatistics().heap_size_limit / 1024 / 1024);
High
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2scripts/install-browsers.mjsView file
89stdio: "inherit",
L90: shell: true,
L91: env,
High
Shell
Package source references shell execution.
scripts/install-browsers.mjsFindings
5 High10 Medium5 Low
HighChild Processdist/cli.cjs
HighShellscripts/install-browsers.mjs
HighRuntime Package Installscripts/install-browsers.mjs
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/cytoscape.esm-LDYqcvCF.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
MediumOversized Source Filedist/index.cjs
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.11.15.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.11.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.