@brrew/projectbridge@0.3.0
ProjectBridge remote host agent CLI
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe source shows conditional exposure of a saved service credential to an unrestricted configured HTTPS endpoint, which warrants a warning. The reviewed behavior does not establish a hidden default exfiltration path or another concrete attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the remote command with a saved configuration containing a device credential and server URL.
Impact
A misconfigured or changed server URL can receive the device credential, exposing authenticated remote-agent access.
Mechanism
The agent uses the configured URL for remote requests and attaches the saved credential as a bearer token.
AI rationale
The source shows conditional exposure of a saved service credential to an unrestricted configured HTTPS endpoint, which warrants a warning. The reviewed behavior does not establish a hidden default exfiltration path or another concrete attack.
Evidence
bin/projectbridge.js
Network endpoints1
projectbridge.brrew.us
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI reads a configured server URL and device credential from its local config.
- It accepts any HTTPS server URL and sends the device credential as a bearer token to that server.
- The remote agent repeatedly polls the server and handles supported host tasks using the credential.
Evidence against
- The package has no install lifecycle hook; its executable is a CLI entrypoint.
- Persistent service installation is activated by an explicit install-service command.
- The agent rejects arbitrary shell execution and remote file writes, and limits tasks to an allowlist.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggedbin/projectbridge.jsView file
6const path = require('node:path');
L7: const { spawn } = require('node:child_process');
L8: const { setTimeout: sleep } = require('node:timers/promises');
...
L11: const VERSION = '0.3.0';
L12: const DEFAULT_SERVER = (process.env.PROJECTBRIDGE_SERVER || 'https://projectbridge.brrew.us').replace(/\/$/, '');
L13: const UA = 'ProjectBridge-Remote/' + VERSION + ' (+https://projectbridge.brrew.us)';
...
L18: if (process.env.PROJECTBRIDGE_CONFIG) return path.resolve(process.env.PROJECTBRIDGE_CONFIG);
L19: if (process.platform === 'win32') return path.join(process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'), 'ProjectBridge', 'remote.json');
L20: return path.join(os.homedir(), '.config', 'projectbridge', 'remote.json');
...
L33: const response = await fetch(new URL(route, b
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
bin/projectbridge.jsView on unpkg · L66Trigger-reachable chain: manifest.bin -> bin/projectbridge.js
L6: const path = require('node:path');
L7: const { spawn } = require('node:child_process');
L8: const { setTimeout: sleep } = require('node:timers/promises');
...
L11: const VERSION = '0.3.0';
L12: const DEFAULT_SERVER = (process.env.PROJECTBRIDGE_SERVER || 'https://projectbridge.brrew.us').replace(/\/$/, '');
L13: const UA = 'ProjectBridge-Remote/' + VERSION + ' (+https://projectbridge.brrew.us)';
...
L18: if (process.env.PROJECTBRIDGE_CONFIG) return path.resolve(process.env.PROJECTBRIDGE_CONFIG);
L19: if (process.platform === 'win32') return path.join(process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'), 'ProjectBridge', 'remote.json');
L20: return path.join(os.homedir(), '.config', 'projectbridge', 'remote.
Findings
2 Critical4 High3 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationbin/projectbridge.js
CriticalTrigger Reachable Dangerous Capabilitybin/projectbridge.js
HighChild Processbin/projectbridge.js
HighShelllib/lifecycle.js
HighSame File Env Network Executionbin/projectbridge.js
HighSandbox Evasion Gated Capabilitybin/projectbridge.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @brrew/projectbridge@0.3.0.
See all versions of @brrew/projectbridge for other recorded verdicts.
- Review the evidence and your use of @brrew/projectbridge@0.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.