registry / @fefeding/aicmd / 1.0.10

@fefeding/aicmd@1.0.10

AI-powered web SSH terminal with autonomous agent, skills, and file transfer

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

scanned 35 file(s), 1.79 MB of source, external domains: aigcwhere.com, api.anthropic.com, api.github.com, api.hunyuan.cloud.tencent.com, api.openai.com, github.com, popper.js.org, vuejs.org, www.google.com, www.w3.org

Source & flagged code

10 flagged

dist/public/index.jsView file

Lines 3953-3993javascript

3953 connected: "Connected",

3954 disconnected: "Disconnected",

3955 connectionFailed: "Connection failed",

3956 wsFailed: "WebSocket connection failed",

3957 reconnect: "Reconnect",

3958 reconnecting: "Reconnecting..."

3959 },

3960 connection: {

3961 addTitle: "New Connection",

3962 editTitle: "Edit Connection",

3963 name: "Connection Name",

3964 namePlaceholder: "Give your connection a name",

3965 host: "Host Address",

3966 hostPlaceholder: "Server IP or domain",

3967 port: "Port",

3968 username: "Username",

3969 usernamePlaceholder: "SSH username",

3970 authType: "Authentication",

3971 auto: "Auto (Local Key)",

3972 autoHint: "Automatically use local SSH keys from ~/.ssh directory",

3973 password: "Password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/public/index.jsView on unpkg · L3973

3974 privateKey: "Private Key",

3975 passwordLabel: "Password",

3976 passwordPlaceholder: "SSH password",

3977 privateKeyContent: "Private Key Content",

3978 privateKeyPlaceholder: "Paste private key content or select a file...",

3979 passphrase: "Key Passphrase (Optional)",

3980 passphrasePlaceholder: "If the key is password-protected",

3981 loadFromFile: "Load from File",

3982 privateKeyLoaded: "Private key loaded",

3983 privateKeyLoadFailed: "Failed to read private key file",

3984 terminalConfig: "Terminal Config",

3985 fontSize: "Font Size",

3986 cursorStyle: "Cursor Style",

3987 cursorBlock: "Block",

3988 cursorUnderline: "Underline",

3989 cursorBar: "Bar",

3990 theme: "Theme",

3991 themeDark: "Dark",

3992 themeLight: "Light",

3993 fontFamily: "Font",

bin/aicmd.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

3const crypto = require('crypto');

4const { exec, spawn } = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicmd.jsView on unpkg · L2

5const path

dist/server/service/connection.service.tsView file

Lines 268-308typescript

268 } catch (e) {

269 console.error(`[SSH] 扫描 SSH 目录失败:`, (e as Error).message);

270 return null;

271 }

272 }

273

274 /**

275 * Detect SSH agent socket for agent forwarding

dist/server/service/ai.service.tsView file

Lines 63-103typescript

63 args?: any;

64 result?: string;

65 collapsed?: boolean;

66}

68export interface HistoryMeta {

69 sessionId: string;

70 sessionName?:

bin/dev.shView file

•path = bin/dev.sh kind = build_helper sizeBytes = 132 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/dev.shView on unpkg

dist/public/bootstrap-icons.woff2View file

•path = dist/public/bootstrap-icons.woff2 kind = high_entropy_blob sizeBytes = 134044 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/public/bootstrap-icons.woff2View on unpkg

electron/main.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @fefeding/aicmd@1.0.7 matchedIdentity = npm:QGZlZmVkaW5nL2FpY21k:1.0.7 similarity = 0.829 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

electron/main.jsView on unpkg

Source & flagged code

10 flagged · loading source

dist/public/index.jsView file

3973patternName = generic_password severity = medium line = 3973 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/public/index.jsView on unpkg · L3973

bin/aicmd.jsView file

3const crypto = require('crypto'); L4: const { exec, spawn } = require('child_process'); L5: const path = require('path');

High

Child Process

Package source references child process execution.

bin/aicmd.jsView on unpkg · L3

3Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, execution+network L3: const crypto = require('crypto'); L4: const { exec, spawn } = require('child_process'); L5: const path = require('path'); L6: const fs = require('fs'); L7: const net = require('net'); L8: const os = require('os'); L9: L10: const projectRoot = path.resolve(__dirname, '..'); L11: ... L18: function getDataDir() { L19: return process.env.AICMD_DATA_DIR || path.join(os.homedir(), '.aicmd'); L20: }

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/aicmd.jsView on unpkg · L3

3const crypto = require('crypto'); L4: const { exec, spawn } = require('child_process'); L5: const path = require('path'); L6: const fs = require('fs'); L7: const net = require('net'); L8: const os = require('os'); ... L18: function getDataDir() { L19: return process.env.AICMD_DATA_DIR || path.join(os.homedir(), '.aicmd'); L20: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/aicmd.jsView on unpkg · L3

2L3: const crypto = require('crypto'); L4: const { exec, spawn } = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicmd.jsView on unpkg · L2

dist/server/service/connection.service.tsView file

288console.log(`[SSH] Windows: using OpenSSH agent pipe: ${pipe}`); L289: console.log(`[SSH] If agent is not running, execute in PowerShell (Admin):`); L290: console.log(`[SSH] Start-Service ssh-agent; Set-Service ssh-agent -StartupType Automatic`);

High

Shell

Package source references shell execution.

dist/server/service/connection.service.tsView on unpkg · L288

dist/server/service/ai.service.tsView file

83interface ISSHService { L84: writeData(sessionId: string, data: string | Buffer): boolean; L85: captureOutput(sessionId: string, timeoutMs?: number): Promise<string>; ... L119: Script execution flow: L120: 1. First detect available languages with \`which python3 node bash\` (Windows: \`where python node powershell\`) L121: 2. Prefer languages already known from system environment info ... L126: cat > /tmp/_ai_task.sh << 'SCRIPT_EOF' L127: #!/bin/bash L128: set -e ... L153: - Linux: OS=Linux, use bash commands L154: - macOS: OS=Darwin, no \`free\`/\`ss\`/\`systemctl\`, use \`vm_stat\`/\`lsof\`/\`launchctl\` instead L155: - Windows: Shell=PowerShell, use PowerShell cmdlets, temp files in \`$env:TEMP\`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/server/service/ai.service.tsView on unpkg · L83

bin/dev.shView file

•path = bin/dev.sh kind = build_helper sizeBytes = 132 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/dev.shView on unpkg

dist/public/bootstrap-icons.woff2View file

•path = dist/public/bootstrap-icons.woff2 kind = high_entropy_blob sizeBytes = 134044 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/public/bootstrap-icons.woff2View on unpkg

electron/main.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

electron/main.jsView on unpkg

Findings

6 High8 Medium5 Low

HighChild Processbin/aicmd.js

HighShelldist/server/service/connection.service.ts

HighEntrypoint Build Divergencebin/aicmd.js

HighSame File Env Network Executionbin/aicmd.js

HighShips High Entropy Blobdist/public/bootstrap-icons.woff2

HighPrevious Version Dangerous Deltaelectron/main.js

MediumSecret Patterndist/public/index.js

MediumDynamic Requirebin/aicmd.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/server/service/ai.service.ts

MediumShips Build Helperbin/dev.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

10 flagged

dist/public/index.jsView file

Lines 3953-3993javascript

3953 connected: "Connected",

3954 disconnected: "Disconnected",

3955 connectionFailed: "Connection failed",

3956 wsFailed: "WebSocket connection failed",

3957 reconnect: "Reconnect",

3958 reconnecting: "Reconnecting..."

3959 },

3960 connection: {

3961 addTitle: "New Connection",

3962 editTitle: "Edit Connection",

3963 name: "Connection Name",

3964 namePlaceholder: "Give your connection a name",

3965 host: "Host Address",

3966 hostPlaceholder: "Server IP or domain",

3967 port: "Port",

3968 username: "Username",

3969 usernamePlaceholder: "SSH username",

3970 authType: "Authentication",

3971 auto: "Auto (Local Key)",

3972 autoHint: "Automatically use local SSH keys from ~/.ssh directory",

3973 password: "Password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/public/index.jsView on unpkg · L3973

3974 privateKey: "Private Key",

3975 passwordLabel: "Password",

3976 passwordPlaceholder: "SSH password",

3977 privateKeyContent: "Private Key Content",

3978 privateKeyPlaceholder: "Paste private key content or select a file...",

3979 passphrase: "Key Passphrase (Optional)",

3980 passphrasePlaceholder: "If the key is password-protected",

3981 loadFromFile: "Load from File",

3982 privateKeyLoaded: "Private key loaded",

3983 privateKeyLoadFailed: "Failed to read private key file",

3984 terminalConfig: "Terminal Config",

3985 fontSize: "Font Size",

3986 cursorStyle: "Cursor Style",

3987 cursorBlock: "Block",

3988 cursorUnderline: "Underline",

3989 cursorBar: "Bar",

3990 theme: "Theme",

3991 themeDark: "Dark",

3992 themeLight: "Light",

3993 fontFamily: "Font",

bin/aicmd.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

3const crypto = require('crypto');

4const { exec, spawn } = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicmd.jsView on unpkg · L2

5const path

dist/server/service/connection.service.tsView file

Lines 268-308typescript

268 } catch (e) {

269 console.error(`[SSH] 扫描 SSH 目录失败:`, (e as Error).message);

270 return null;

271 }

272 }

273

274 /**

275 * Detect SSH agent socket for agent forwarding

dist/server/service/ai.service.tsView file

Lines 63-103typescript

63 args?: any;

64 result?: string;

65 collapsed?: boolean;

66}

68export interface HistoryMeta {

69 sessionId: string;

70 sessionName?:

bin/dev.shView file

•path = bin/dev.sh kind = build_helper sizeBytes = 132 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/dev.shView on unpkg

dist/public/bootstrap-icons.woff2View file

•path = dist/public/bootstrap-icons.woff2 kind = high_entropy_blob sizeBytes = 134044 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/public/bootstrap-icons.woff2View on unpkg

electron/main.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

electron/main.jsView on unpkg