@aggroot-team/aggroot@1.11.16
Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 2mo ago · by lpm-firewall-aiSource inspection confirms a runtime AI-agent capability with automatic approval and broad local, network, and remote-system tools, but not a concrete automatic malicious action. The absence of install hooks and confirmed exfiltration supports a warning rather than a publication block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs the aggroot CLI and selects or uses the bundled coding agent.
Impact
The agent could modify local or remote systems or make network requests without per-action approval, depending on the host tool implementation and prompts.
Mechanism
Auto-approved AI-agent tool execution
AI rationale
Source inspection confirms a runtime AI-agent capability with automatic approval and broad local, network, and remote-system tools, but not a concrete automatic malicious action. The absence of install hooks and confirmed exfiltration supports a warning rather than a publication block.
Evidence
share/agents/agent-coder.json
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package ships an auto-approved coding-agent profile with shell, web, HTTP, and SSH write/execute capabilities.
- The bundled agent prompt directly instructs an AI agent how to operate tools and remote systems, creating a high-risk control surface when the CLI is used.
Evidence against
- package.json defines no preinstall, install, or postinstall hook.
- No source-inspected automatic credential collection, data exfiltration, or destructive action was found.
- The browser downloader is not registered as a lifecycle hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
12 flaggeddist/cli.cjsView file
4const path = require('node:path');
L5: const { spawn } = require('node:child_process');
L6: const heapLimitMB = Math.round(v8.getHeapStatistics().heap_size_limit / 1024 / 1024);
High
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2scripts/install-browsers.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @aggroot-team/aggroot@1.11.15
matchedIdentity = npm:QGFnZ3Jvb3QtdGVhbS9hZ2dyb290:1.11.15
similarity = 0.928
summary = stored previous version shares package body but lacks this dangerous source file
Findings
1 Critical5 High9 Medium5 Low
CriticalPrevious Version Dangerous Deltascripts/install-browsers.mjs
HighChild Processdist/cli.cjs
HighShellscripts/install-browsers.mjs
HighRuntime Package Installscripts/install-browsers.mjs
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/chunk-AQP2D5EJ-B1uJ4wZy.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.11.16.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.11.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.