@aitherium/awsh@1.18.3
awsh - your terminal answers you. Type a question where a command would go, and get an answer instead of "command not found".
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe crash reporter automatically sends identifying runtime telemetry without a prompt for TUI unhandled rejections. This is suspicious telemetry, though the source shows no credential theft or unrelated collector.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
An unhandled promise rejection while the TUI is active; other crash paths prompt, with piped input auto-accepting.
Impact
Hostname, command and stack details may be disclosed to the configured feedback service.
Mechanism
Builds a crash report containing host and error context, then posts it to the configured Genesis URL.
AI rationale
The crash reporter automatically sends identifying runtime telemetry without a prompt for TUI unhandled rejections. This is suspicious telemetry, though the source shows no credential theft or unrelated collector.
Evidence
dist/main.jsdist/crash-reporter.js
Network endpoints1
AITHER_GENESIS_URL (default http://localhost:8001), POST /feedback
Decision evidence
public snapshotAI called this Suspicious at 98.0% confidence as Unknown with low false-positive risk.
Evidence for warning
- The CLI installs a crash reporter at startup; when an unhandled rejection occurs while the TUI is active, it submits the report silently without prompting.
- Crash reports include the hostname, command, OS details and stack trace, and are POSTed to the Genesis /feedback endpoint.
- Outside the TUI, the report prompt defaults to yes, and piped stdin is treated as automatic approval.
Evidence against
- The package manifest has no install, preinstall or postinstall hook.
- Grid sync sends its token only after the user invokes that command, to the package's gateway or configured gateway URL.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggeddist/repl.jsView file
14import * as readline from 'node:readline';
L15: import { execSync } from 'node:child_process';
L16: import { existsSync, readFileSync, appendFileSync, mkdirSync, writeFileSync } from 'node:fs';
High
636else if (!shellCmd) {
L637: console.log(chalk.yellow(' Usage: !command (run in PowerShell 7)'));
L638: console.log(chalk.dim(' !! repeats last shell command'));
High
742patternName = generic_password
severity = medium
line = 742
Medium
dist/crash-reporter.jsView file
Findings
1 Critical8 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/main.js
HighChild Processdist/repl.js
HighShelldist/repl.js
HighSame File Env Network Executiondist/crash-reporter.js
HighCredential Redirect Persistencedist/commands.js
HighCommand Output Exfiltrationdist/commands.js
HighSandbox Evasion Gated Capabilitydist/commands.js
HighRuntime Package Installdist/commands.js
HighSemantic Analysis Limiteddist/client.js#virtual:normalized:round1
MediumSecret Patterndist/repl.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @aitherium/awsh@1.18.3.
See all versions of @aitherium/awsh for other recorded verdicts.
- Review the evidence and your use of @aitherium/awsh@1.18.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.