@aggroot-team/aggroot@1.13.11
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 13h ago · by lpm-firewall-aiThe package sends undisclosed runtime telemetry by default to a hard-coded IP endpoint, so users should be warned. The inspected events contain usage metadata and anonymous identifiers, with no evidence of credential or file exfiltration.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Starting the package CLI, gateway, or web application.
Impact
The endpoint receives persistent anonymous identifiers and application usage metadata without disclosed consent or an apparent opt-out in the package documentation.
Mechanism
The app records startup and usage events with random device/session identifiers, version, and event metadata, then POSTs batches to the configured telemetry endpoint.
AI rationale
The package sends undisclosed runtime telemetry by default to a hard-coded IP endpoint, so users should be warned. The inspected events contain usage metadata and anonymous identifiers, with no evidence of credential or file exfiltration.
Evidence
dist/index.cjs~/.aggroot/device-id
Network endpoints1
106.53.152.172:8643
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Telemetry is enabled by default and points to http://106.53.152.172:8643.
- The application initializes telemetry and records an app_start event whenever its CLI, gateway, or web entry starts.
- Telemetry batches include a device ID, session ID, package version, and event metadata, and are POSTed to the configured endpoint.
- The startup event records mode, platform, architecture, and Node.js version.
Evidence against
- The manifest has no install, preinstall, or postinstall lifecycle script.
- The inspected telemetry fields do not include credentials, file contents, hostnames, or usernames.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
9 flaggeddist/cli.cjsView file
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2dist/native/better_sqlite3.nodeView file
•path = dist/native/better_sqlite3.node
kind = native_binary
sizeBytes = 1919488
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/native/better_sqlite3.nodeView on unpkgdist/tree-sitter-c.wasmView file
•
Findings
3 High9 Medium6 Low
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/chunk-AQP2D5EJ-vf9L3Zv1.js
HighKnown Malware Source Similarityshare/web/dist/assets/flowDiagram-I6XJVG4X-BmrUcaI5.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.13.11.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.13.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.