registry / @aui.io/apollo / 0.1.27

@aui.io/apollo@0.1.27

Apollo operator console — CLI + interactive TUI

AI Security Review

scanned 16d ago · by lpm-firewall-ai

On installation, the package mutates user shell startup files to execute Apollo shell-init in future shells. It also conditionally repairs package-local OpenTUI dependencies through npm.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall

Impact

Future zsh/bash sessions invoke the installed Apollo command; install may modify package-local dependencies.

Mechanism

shell rc persistence plus conditional dependency reinstall

Rationale

Source inspection confirms an automatic, persistent shell configuration mutation during postinstall, but no concrete malicious behavior. Warn rather than block because the mutation is package-aligned and not an AI-agent control-surface takeover.

Evidence

package.jsonscripts/setup-shell.mjsscripts/ensure-opentui.mjsbin/apollo.jsnode_modules/@opentui~/.zshrc~/.bashrc~/.bash_profile

Network endpoints1

registry.npmjs.org/

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with false-positive risk.

@aui.io/apollo@0.1.27

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code