registry / @aggroot-team/aggroot / 1.13.7
@aggroot-team/aggroot@1.13.7
⚠ Under reviewAggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe manifest and CLI evidence do not establish attack behavior, but the package contains a native executable whose bounded analysis explicitly leaves targets uninspected. Manual review is needed to resolve that executable’s behavior.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Use of the native SQLite addon; its activation path and behavior are not established by the inspected evidence.
Impact
The addon’s behavior cannot be ruled benign or malicious from this inspection.
Mechanism
The available native analysis is partial and does not resolve all call targets.
AI rationale
The manifest and CLI evidence do not establish attack behavior, but the package contains a native executable whose bounded analysis explicitly leaves targets uninspected. Manual review is needed to resolve that executable’s behavior.
Evidence
.lpm-inspection-9Jl1a9/0-e75b8c024a85.txtdist/native/better_sqlite3.node
Decision evidence
public snapshotAI called this Manual Review at 90.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes a CLI at dist/cli.cjs and includes the dist directory.
- The inspected manifest scripts begin with development and build commands; no install lifecycle hook is shown.
- The shipped native SQLite addon is a Windows x64 executable, and its offline analysis reports uninspected call targets.
Evidence against
- The CLI wrapper relaunches the package entry point with a larger memory limit and inherited standard input/output.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
9 flaggeddist/cli.cjsView file
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2dist/native/better_sqlite3.nodeView file
•path = dist/native/better_sqlite3.node
kind = native_binary
sizeBytes = 1919488
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/native/better_sqlite3.nodeView on unpkgdist/tree-sitter-c.wasmView file
•
Findings
3 High9 Medium6 Low
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/chunk-AQP2D5EJ-CVGfNGh3.js
HighKnown Malware Source Similarityshare/web/dist/assets/flowDiagram-I6XJVG4X-CJXfxxlw.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.13.7.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.13.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.