registry / Install hook abuse / @aui.io/apollo
@aui.io/apollo
Apollo operator console — CLI + interactive TUI
This report shows the evidence for @aui.io/apollo@0.1.53. 2 of 41 known versions are blocked or flagged. The newest version, 0.1.99, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package establishes unconsented shell persistence during postinstall and uses dynamic evaluation from a user startup file. This is concrete install-hook abuse despite the absence of a self-dependency.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
npm postinstall during package installation, followed by starting zsh or bash.
Impact
It persists package-controlled command evaluation across future shells without an explicit setup command.
Mechanism
Automatic shell startup-file injection and lifecycle npm invocation.
Attack narrative
Installing the package runs setup-shell.mjs automatically. It selects existing zsh and bash startup files, may create the login shell file, and appends an eval of `apollo shell-init`. Every later matching shell session therefore executes code emitted by the installed package. The same lifecycle hook can delete the package's OpenTUI directory and run npm install.
AI rationale
The package establishes unconsented shell persistence during postinstall and uses dynamic evaluation from a user startup file. This is concrete install-hook abuse despite the absence of a self-dependency.
Evidence
package.jsonscripts/setup-shell.mjsscripts/ensure-opentui.mjs~/.zshrc~/.bashrc~/.bash_profilenode_modules/@opentui
Decision evidence
public snapshotAI called this Malicious at 93.0% confidence as Malware with low false-positive risk.
Evidence for block
- The postinstall hook automatically runs shell-configuration code.
- The hook appends an eval of the package command to existing shell startup files and can create the login shell startup file.
- A second postinstall script deletes its OpenTUI dependency directory and invokes npm install.
Evidence against
- The manifest does not runtime-depend on its own package name.
- The repair install names only the two declared OpenTUI dependencies.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemShell
NoLicense
Source & flagged code
15 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./scripts/ensure-opentui.mjs && node ./scripts/setup-shell.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./scripts/ensure-opentui.mjs && node ./scripts/setup-shell.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/apollo.jsView file
10L11: const require = createRequire(import.meta.url);
L12: const cliBin = require.resolve("@aui.io/apollo-cli/bin/apollo.js");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/apollo.jsView on unpkg · L10Findings
12 High5 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitednode_modules/@aui.io/apollo-core/node_modules/yaml/dist/parse/lexer.js#virtual:normalized:round1
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-cli/node_modules/commander/lib/command.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-core/dist/src/services/doctor.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-tui/dist/src/lib/ide.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-core/dist/src/api/identity.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-tui/node_modules/@opentui/core/chunk-bun-t2myhmwd.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-core/dist/src/services/upgrade.js
Affected versions and remediation
This report applies to @aui.io/apollo@0.1.53.
The versions list below shows the verdict for each recorded version.
- Avoid installing @aui.io/apollo@0.1.53. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.