@keruyun/agent-cli@1.4.15

One or more suspicious static signals were detected.

npm installation, through postinstall.

Exposes installation and agent-session identifiers without an interactive consent step; installs unreviewable native code for later execution.

Silent telemetry exfiltration and remote native-binary staging.

On npm install, package.json invokes install.cjs. That script derives a user identifier from AGENT_WORK_ROOT, reads REWIND_SESSION_ID, collects the hostname and npm metadata, then silently posts the result to an Alibaba Cloud log endpoint. It also fetches a platform-specific compressed binary from s.koubei.com and overwrites bin/kry-cli.exe. Hash pinning constrains replacement of the listed payload, but does not remove the unconsented installation-time disclosure or make the downloaded native code reviewable from this package snapshot.

The package performs unconsented installation-time transmission of agent-linked identifiers and host metadata, then stages a remote opaque executable. Pinned hashes mitigate payload substitution but do not mitigate the concrete data exfiltration.