registry / @aggroot-team/aggroot / 1.13.0
@aggroot-team/aggroot@1.13.0
Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe inspected postinstall chain performs package-aligned browser setup, while the flagged test and web assets do not establish malicious behavior. Scanner similarity and coverage hints alone do not establish an attack.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Package installation invokes the postinstall script.
Impact
The inspected behavior installs a browser dependency; no credential transfer, agent control-surface mutation, or other attack effect was established.
Mechanism
The script locates Playwright, checks its Chromium cache, and runs its CLI installer if the required browser is absent.
AI rationale
The inspected postinstall chain performs package-aligned browser setup, while the flagged test and web assets do not establish malicious behavior. Scanner similarity and coverage hints alone do not establish an attack.
Evidence
scripts/install-browsers.mjs
Network endpoints1
npmmirror.com/mirrors/playwright
Decision evidence
public snapshotAI called this Clean at 83.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs a package script that checks for Playwright Chromium and installs it only when missing.
- The installer invokes the package’s Playwright CLI to install Chromium; the inspected path shows no consumer policy or agent configuration mutation.
- The tokenizer finding is a standalone lexer test, and the flagged web bundles begin with imports from neighboring diagram assets.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/install-browsers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/cli.cjsView file
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2scripts/install-browsers.mjsView file
15Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network
L15:
L16: import { spawn } from "child_process";
L17: import { existsSync, readFileSync } from "node:fs";
...
L23: const MIRRORS = [
L24: { host: "https://npmmirror.com/mirrors/playwright", name: "淘宝镜像" },
L25: { host: "", name: "官方源" },
...
L27:
L28: // npm postinstall 会吞掉 stdout，用 stderr 输出状态让用户看到
L29: function status(msg) {
L30: process.stderr.write(`\n[browsers] ${msg}\n`);
L31: }
...
L38: try {
Findings
6 High9 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighEntrypoint Build Divergencescripts/install-browsers.mjs
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/chunk-AQP2D5EJ-CS2cqADc.js
HighKnown Malware Source Similarityshare/web/dist/assets/flowDiagram-I6XJVG4X-o8EEcTmp.js
HighPrevious Version Dangerous Deltascripts/install-browsers.mjs
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helper
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.13.0.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.13.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.