registry / @seemseam/ccb / 8.6.5

@seemseam/ccb@8.6.5

Lightweight multi-agent TUI and stable cross-provider collaboration layer for Codex, Claude, Gemini, Grok, Kimi, DeepSeek, and other CLI agents.

AI Security Review

scanned 22h ago · by lpm-firewall-ai

Installing the package downloads an unpinned remote archive, extracts it, and executes its installer. The bundled source cannot establish what that remote payload does.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall

Impact

Arbitrary code can execute with the installing user's privileges.

Mechanism

remote archive download, extraction, and bash execution

Attack narrative

npm automatically invokes the installer. It accepts a release base URL from the environment, downloads both an archive and its checksum from that source, verifies only that pair against each other, extracts the archive into .ccb-release, and runs its install.sh with bash. This creates install-time arbitrary remote code execution without a package-pinned payload digest.

Rationale

The postinstall hook executes a remotely supplied shell script whose archive and checksum share the same mutable trust source. This is a concrete install-time remote-code-execution chain, not merely a static network primitive.

Evidence

package.jsonbin/ccb-npm-install.js.ccb-release.ccb-release/<platform>/install.sh.ccb-install.lock

Network endpoints1

github.com/SeemSeam/claude_codex_bridge/releases/download/v${version}

@seemseam/ccb@8.6.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code