registry / @aitherium/awsh / 1.19.6
@aitherium/awsh@1.19.6
awsh - your terminal answers you. Type a question where a command would go, and get an answer instead of "command not found".
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe credential and process findings correspond to the CLI’s service requests and local backend startup. Crash reports require user confirmation, and the package has no install lifecycle hook.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI startup or an invoked command; crash reporting requires a prompt after an error.
Impact
Expected service requests and local daemon startup; crash details are sent only if the user confirms.
Mechanism
Uses the saved Aitherium token with its gateway, registers an endpoint after successful sign-in, can start its local agent daemon, and prompts before submitting a crash report.
AI rationale
The credential and process findings correspond to the CLI’s service requests and local backend startup. Crash reports require user confirmation, and the package has no install lifecycle hook.
Network endpoints3
gateway.aitherium.comlocalhost:8001Aitherium/AitherOS
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI and lists no preinstall, install, or postinstall hook.
- Wallet requests use the saved Aitherium token with the Aitherium gateway by default.
- Crash reports are sent only after asking the user to submit them; declining sends nothing.
- Mesh registration follows successful device authorization and sends the bearer token to the configured Genesis endpoint.
- The added backend resolver starts the package’s local agent daemon as part of the shell’s backend selection.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
12 flaggeddist/repl.jsView file
14import * as readline from 'node:readline';
L15: import { execSync } from 'node:child_process';
L16: import { existsSync, readFileSync, appendFileSync, mkdirSync } from 'node:fs';
High
702else if (!shellCmd) {
L703: console.log(chalk.yellow(' Usage: !command (run in PowerShell 7)'));
L704: console.log(chalk.dim(' !! repeats last shell command'));
High
808patternName = generic_password
severity = medium
line = 808
Medium
dist/crash-reporter.jsView file
Findings
1 Critical10 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/backend-resolver.js
HighChild Processdist/repl.js
HighShelldist/repl.js
HighSame File Env Network Executiondist/crash-reporter.js
HighCredential Exfiltrationdist/wallet-command.js
HighCredential Redirect Persistencedist/commands.js
HighCommand Output Exfiltrationdist/commands.js
HighSandbox Evasion Gated Capabilitydist/rc-command.js
HighTrigger Reachable Credential Exfiltrationdist/wallet-command.js
HighRuntime Package Installdist/backend-command.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/awconnect-command.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @aitherium/awsh@1.19.6.
See all versions of @aitherium/awsh for other recorded verdicts.
- Review the evidence and your use of @aitherium/awsh@1.19.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.