@aui.io/apollo@0.1.57
Apollo operator console — CLI + interactive TUI
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package performs unconsented persistent shell configuration and may run a nested npm installation from postinstall. The inspected code does not establish credential theft, destructive behavior outside its dependency directory, or a complete self-dependency chain, so it warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
npm postinstall
Impact
User shell sessions can automatically evaluate code emitted by the installed apollo command; the install hook can also alter the package's OpenTUI dependency directory.
Mechanism
shell startup-file injection and conditional nested npm install
AI rationale
The package performs unconsented persistent shell configuration and may run a nested npm installation from postinstall. The inspected code does not establish credential theft, destructive behavior outside its dependency directory, or a complete self-dependency chain, so it warrants a warning rather than a block.
Evidence
package.jsonscripts/setup-shell.mjsscripts/ensure-opentui.mjs.zshrc.bashrc.bash_profilenode_modules/@opentui
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The automatic postinstall hook runs two setup scripts.
- One setup script appends an eval command to existing user shell startup files and can create the login shell file.
- The other setup script deletes its bundled OpenTUI directory when deemed broken, then runs npm install during postinstall.
Evidence against
- No credential collection or data exfiltration was found in the inspected install scripts.
- The runtime dynamic import is gated by an environment variable and is not reached by the install hook.
- The inspected high-signal dependency files implement CLI, UI, login, and API functions rather than an install-time payload.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemShell
NoLicense
Source & flagged code
13 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./scripts/ensure-opentui.mjs && node ./scripts/setup-shell.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./scripts/ensure-opentui.mjs && node ./scripts/setup-shell.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/apollo.jsView file
10L11: const require = createRequire(import.meta.url);
L12: const cliBin = require.resolve("@aui.io/apollo-cli/bin/apollo.js");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/apollo.jsView on unpkg · L10Findings
10 High5 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitednode_modules/@aui.io/apollo-core/node_modules/yaml/dist/parse/lexer.js#virtual:normalized:round1
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-cli/node_modules/commander/lib/command.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-core/dist/src/services/doctor.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-tui/dist/src/lib/ide.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-core/dist/src/api/identity.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-tui/node_modules/@opentui/core/chunk-bun-t2myhmwd.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-core/dist/src/services/upgrade.js
Affected versions and remediation
This report applies to @aui.io/apollo@0.1.57.
See all versions of @aui.io/apollo for other recorded verdicts.
- Review the evidence and your use of @aui.io/apollo@0.1.57 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.