Loading npm security reports…

@seemseam/ccb@8.6.16: Malicious npm security report (Block) | LPM Firewall

registry / @seemseam/ccb / 8.6.16

@seemseam/ccb@8.6.16

Lightweight multi-agent TUI and stable cross-provider collaboration layer for Codex, Claude, Gemini, Grok, Kimi, and other CLI agents.

AI Security Review

scanned 26d ago · by lpm-firewall-ai

The postinstall hook downloads an opaque release archive, verifies it against a checksum fetched from that same location, extracts it, and executes its shell installer. This gives the remote release content code execution during npm installation.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation runs the postinstall hook.

Impact

A changed release asset, checksum, or redirect target can execute arbitrary commands with the installing user's permissions.

Mechanism

Automatic remote payload download, extraction, and shell execution.

Attack narrative

Installing the package automatically runs its JavaScript installer. The installer downloads a platform archive and SHA256SUMS from a release URL that may also be overridden by an environment variable, follows redirects, and treats the downloaded checksum as authoritative. It then extracts the archive into .ccb-release and invokes its uninspected install.sh through bash. The package snapshot therefore delegates install-time code execution to mutable remote content rather than shipping or independently pinning the executed installer.

AI rationale

This is an automatic staged remote-code-execution chain at npm postinstall, with no embedded trusted digest or signature for the fetched payload. The absence of visible credential theft does not mitigate execution of opaque remote shell code during installation.

Evidence

package.jsonbin/ccb-npm-install.js.ccb-release

Network endpoints1

/SeemSeam/claude_codex_bridge/releases/download/v${version}

Source & flagged code

5 flagged

package.jsonView file

Lines 34-72json

34 ],

35 "bin": {

36 "ccb": "bin/ccb.js",

37 "ask": "bin/ask.js",

38 "autonew": "bin/autonew.js",

39 "ctx-transfer": "bin/ctx-transfer.js"

40 },

41 "files": [

42 "bin/ccb.js",

43 "bin/ask.js",

44 "bin/autonew.js",

45 "bin/ctx-transfer.js",

46 "bin/ccb-npm-install.js",

47 "bin/ccb-npm-runner.js",

48 "README.md",

49 "README/*.md",

50 "LICENSE",

51 "VERSION"

52 ],

53 "scripts": {

54 "postinstall": "node bin/ccb-npm-install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L54

55 "pack:check": "npm pack --dry-run"

56 },

57 "engines": {

58 "node": ">=18"

59 },

60 "os": [

61 "linux",

62 "darwin"

63 ],

64 "cpu": [

65 "x64",

66 "arm64"

67 ],

68 "publishConfig": {

69 "access": "public"

70 }

71}

72

bin/ask.jsView file

Lines 1-5javascript

1#!/usr/bin/env node

2"use strict";

3

4require("./ccb-npm-runner").run("ask");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ask.jsView on unpkg · L3

5

bin/ccb-npm-install.jsView file

•matchType = normalized_sha256 matchedPackage = @seemseam/ccb@8.6.5 matchedPath = bin/ccb-npm-install.js matchedIdentity = npm:QHNlZW1zZWFtL2NjYg:8.6.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/ccb-npm-install.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 04a58e456c447292 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @seemseam/ccb@8.6.5 matchedPath = bin/ccb-npm-install.js matchedIdentity = npm:QHNlZW1zZWFtL2NjYg:8.6.5 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/ccb-npm-install.jsView on unpkg

bin/ccb-npm-runner.jsView file

•matchType = normalized_sha256 matchedPackage = @seemseam/ccb@8.6.5 matchedPath = bin/ccb-npm-runner.js matchedIdentity = npm:QHNlZW1zZWFtL2NjYg:8.6.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/ccb-npm-runner.jsView on unpkg