registry / @aggroot-team/aggroot / 1.11.20
@aggroot-team/aggroot@1.11.20
Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe published package is an AI assistant CLI whose npm scripts do not install browsers, mutate agent config, or fetch a payload. The flagged files are a heap wrapper, an unused Playwright installer, a tokenizer test, and Mermaid diagram bundles.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
No automatic trigger. The binary runs only when the user invokes aggroot.
Impact
No unconsented project mutation, credential theft, or remote payload execution was established from the inspected entry points.
Mechanism
The wrapper respawns Node with a larger heap and loads the bundled assistant. Playwright browser download is a separate script that package.json does not invoke.
AI rationale
The published package is an AI assistant CLI whose npm scripts do not install browsers, mutate agent config, or fetch a payload. The flagged files are a heap wrapper, an unused Playwright installer, a tokenizer test, and Mermaid diagram bundles.
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json version 1.11.20 exposes the aggroot bin at dist/cli.cjs and has no preinstall, install, or postinstall script.
- dist/cli.cjs only respawns the current Node binary with a larger heap and then loads dist/index.cjs with the user arguments.
- scripts/install-browsers.mjs runs npx playwright install chromium only if that file is executed, and package.json does not call it.
- scripts/test-tokenizer.js is a local shell-token lexer test and is not an npm entrypoint.
- share/web/dist/assets/chunk-AQP2D5EJ-D6eH7muX.js is a Mermaid state-diagram parser for the bundled web UI.
- share/web/dist/assets/flowDiagram-I6XJVG4X-DsB4eJBa.js is a Mermaid flowchart diagram model for the bundled web UI.
Evidence against
- install-browsers.mjs uses shell and an npmmirror Playwright host, but it is not an install hook.
- The published bundle includes native and wasm assets consistent with sqlite and tree-sitter, not a hidden installer.
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
12 flaggeddist/cli.cjsView file
4const path = require('node:path');
L5: const { spawn } = require('node:child_process');
L6: const heapLimitMB = Math.round(v8.getHeapStatistics().heap_size_limit / 1024 / 1024);
High
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2scripts/install-browsers.mjsView file
89stdio: "inherit",
L90: shell: true,
L91: env,
High
Shell
Package source references shell execution.
scripts/install-browsers.mjsFindings
6 High9 Medium6 Low
HighChild Processdist/cli.cjs
HighShellscripts/install-browsers.mjs
HighRuntime Package Installscripts/install-browsers.mjs
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/chunk-AQP2D5EJ-D6eH7muX.js
HighKnown Malware Source Similarityshare/web/dist/assets/flowDiagram-I6XJVG4X-DsB4eJBa.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.11.20.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.11.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.