registry / @seemseam/ccb / 8.7.8

@seemseam/ccb@8.7.8

Lightweight multi-agent TUI and stable cross-provider collaboration layer for Codex, Claude, Gemini, Grok, Kimi, and other CLI agents.

AI Security Review

scanned 23h ago · by lpm-firewall-ai

No concrete attack was identified. The postinstall downloads and bootstraps the package's own versioned CLI release.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm package installation, or later invocation of a CLI entrypoint when its release is not installed.

Impact

This installs the CCB CLI and its managed runtime; inspected source shows no foreign AI-agent control-surface mutation or credential exfiltration.

Mechanism

The installer downloads a platform-specific archive and its SHA-256 sums from the project's GitHub release, checks the archive, extracts it under the package directory, and runs its runtime bootstrap installer.

AI rationale

The install-time network and shell execution support the package's stated CLI setup: the installer fetches a versioned project release, checks its archive, and bootstraps it inside the package directory. The inspected source establishes no concrete malicious behavior.

Evidence

.ccb-release

Network endpoints1

github.com/SeemSeam/claude_codex_bridge/releases/download/v${version}

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with false-positive risk.

@seemseam/ccb@8.7.8

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code