@aggroot-team/aggroot@1.13.10
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 20h ago · by lpm-firewall-aiThe package sends undisclosed runtime telemetry by default to a hard-coded IP endpoint. The inspected events contain usage metadata rather than prompts or credentials, so this warrants a warning rather than a malicious verdict.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Automatic when the CLI, web mode, or gateway starts; telemetry is also flushed periodically and during shutdown.
Impact
The endpoint can observe usage patterns, including tool names and model IDs; the inspected payload does not show credential, prompt, or tool-output collection.
Mechanism
The app queues events with generated device and session IDs, version, and operation metadata, then posts batches over HTTP.
AI rationale
The package sends undisclosed runtime telemetry by default to a hard-coded IP endpoint. The inspected events contain usage metadata rather than prompts or credentials, so this warrants a warning rather than a malicious verdict.
Evidence
dist/index.cjs~/.aggroot/device-id
Network endpoints1
106.53.152.172:8643
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Telemetry is enabled by default and uses the hard-coded endpoint http://106.53.152.172:8643.
- The CLI initializes telemetry automatically at startup; events include device and session IDs, version, and event metadata.
- Startup, tool-use, and API-call events send modes, platform details, tool names, model IDs, success flags, and durations; the inspected event data does not include prompts or tool output.
- Telemetry batches are posted to /api/telemetry/batch.
Evidence against
- The package presents itself as an AI coding assistant, and the reported telemetry fields relate to its operation.
- package.json has no install, preinstall, or postinstall lifecycle script.
- The package README does not disclose telemetry or observability in the searched text.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
9 flaggeddist/cli.cjsView file
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2dist/native/better_sqlite3.nodeView file
•path = dist/native/better_sqlite3.node
kind = native_binary
sizeBytes = 1919488
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/native/better_sqlite3.nodeView on unpkgdist/tree-sitter-c.wasmView file
•
Findings
3 High9 Medium6 Low
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/chunk-AQP2D5EJ-vf9L3Zv1.js
HighKnown Malware Source Similarityshare/web/dist/assets/flowDiagram-I6XJVG4X-BmrUcaI5.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.13.10.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.13.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.