registry / @aggroot-team/aggroot / 1.12.4
@aggroot-team/aggroot@1.12.4
Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe lifecycle behavior is a browser setup step, and the flagged web assets contain diagram and math rendering code. The tokenizer script processes a fixed command as text; inspected source provides no evidence that it executes the command or that the package conducts an attack.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Package installation runs the postinstall hook.
Impact
This may download browser files into Playwright’s cache; inspected source does not show credential collection, unrelated project mutation, or agent-setting changes.
Mechanism
The installer checks for the required Chromium build and, if absent, invokes the packaged Playwright installer using its configured download source.
AI rationale
The lifecycle behavior is a browser setup step, and the flagged web assets contain diagram and math rendering code. The tokenizer script processes a fixed command as text; inspected source provides no evidence that it executes the command or that the package conducts an attack.
Evidence
package.jsonscripts/install-browsers.mjs
Network endpoints1
npmmirror.com/mirrors/playwright
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json runs the browser installer at postinstall.
- The installer checks for the required Chromium build and skips installation when it is already present; otherwise it invokes Playwright to install Chromium.
- The installer uses Playwright’s download mechanism, with an optional npmmirror host.
- The web bundle references diagram assets, the KaTeX bundle exports rendering and parsing functions, and the flagged assets contain diagram parser code.
- The tokenizer script tokenizes a hard-coded command string; the inspected code does not execute it.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
11 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/install-browsers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/cli.cjsView file
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2scripts/install-browsers.mjsView file
15Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network
L15:
L16: import { spawn } from "child_process";
L17: import { existsSync, readFileSync } from "node:fs";
...
L23: const MIRRORS = [
L24: { host: "https://npmmirror.com/mirrors/playwright", name: "淘宝镜像" },
L25: { host: "", name: "官方源" },
...
L27:
L28: // npm postinstall 会吞掉 stdout，用 stderr 输出状态让用户看到
L29: function status(msg) {
L30: process.stderr.write(`\n[browsers] ${msg}\n`);
L31: }
...
L38: try {
Findings
5 High9 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighEntrypoint Build Divergencescripts/install-browsers.mjs
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/chunk-AQP2D5EJ-B4uxrmqt.js
HighKnown Malware Source Similarityshare/web/dist/assets/flowDiagram-I6XJVG4X-DCB84T4c.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
MediumOversized Source Filedist/index.cjs
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.12.4.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.12.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.