registry / @aui.io/apollo / 0.1.93
@aui.io/apollo@0.1.93
Apollo CLI — author, test and operate Apollo-1 agents from your terminal (scriptable CLI + interactive TUI)
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe inspected flagged files implement ordinary CLI, editor, diff, parser, and shell-integration behavior. The postinstall shell change is limited to Apollo's auto-cd feature, and no concrete attack behavior was found.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Installing the package runs its postinstall hook; shell setup skips CI and can be disabled with an environment variable.
Impact
The shell startup files are modified for the package's stated convenience feature; no harmful effect or separate attack behavior was established.
Mechanism
The helper may append an Apollo command wrapper to supported shell startup files. The wrapper changes directories only after an explicit agent use, import, or create command.
AI rationale
The inspected flagged files implement ordinary CLI, editor, diff, parser, and shell-integration behavior. The postinstall shell change is limited to Apollo's auto-cd feature, and no concrete attack behavior was found.
Evidence
~/.zshrc~/.bashrc~/.bash_profile
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs setup helpers; the OpenTUI helper installs only the package's declared OpenTUI dependencies when repair is needed.
- The shell helper can append an Apollo startup line to supported shell rc files. It has CI and environment opt-outs, and its wrapper changes directories only after explicit agent use, import, or create commands.
- The reported diff bundle implements text diffing, while Commander spawns CLI subcommands.
- The IDE helper launches a detected editor for a directory, and the Claude backend runs the Claude CLI from a checkout.
- The OpenTUI chunk uses environment values to resolve platform assets, and the CLI entrypoint registers ordinary commands.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystem
NoLicense
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./scripts/ensure-opentui.mjs && node ./scripts/setup-shell.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./scripts/ensure-opentui.mjs && node ./scripts/setup-shell.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/apollo.jsView file
10L11: const require = createRequire(import.meta.url);
L12: const cliBin = require.resolve("@aui.io/apollo-cli/bin/apollo.js");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/apollo.jsView on unpkg · L10Findings
7 High5 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitednode_modules/@aui.io/apollo-core/node_modules/diff/dist/diff.min.js#virtual:normalized:round1
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-cli/node_modules/commander/lib/command.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-tui/dist/src/lib/ide.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-tui/node_modules/@opentui/core/chunk-bun-t2myhmwd.js
HighKnown Malware Source Similaritynode_modules/@aui.io/apollo-tui/dist/src/author/backend/claudeCode.js
HighPrevious Version Dangerous Deltanode_modules/@aui.io/apollo-cli/dist/src/index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirebin/apollo.js
Affected versions and remediation
This report applies to @aui.io/apollo@0.1.93.
See all versions of @aui.io/apollo for other recorded verdicts.
- Review the evidence and your use of @aui.io/apollo@0.1.93 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.