registry / @seemseam/ccb / 8.7.2

@seemseam/ccb@8.7.2

Lightweight multi-agent TUI and stable cross-provider collaboration layer for Codex, Claude, Gemini, Grok, Kimi, and other CLI agents.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

Installing the package runs a postinstall script that downloads a release archive and executes a shell installer that is not present in the published JavaScript. The default URL is the project's GitHub release, but the script body and any host it is redirected to cannot be reviewed from this package.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall, and again when a user runs the ccb, ask, autonew, or ctx-transfer binaries if the release is not already present.

Impact

Install-time execution of a remote shell and binary whose contents are outside this package. A changed release, redirect, or CCB_NPM_RELEASE_BASE_URL can change what runs. No in-package credential theft or agent-config write was found.

Mechanism

https.get fetches a tar.gz and SHA256SUMS, tar extracts them into .ccb-release, and bash runs the extracted install.sh runtime-bootstrap. Later CLI entrypoints spawn the extracted binary.

AI rationale

The postinstall hook downloads and runs a release shell script that ships outside this package, so install-time remote execution is a real unresolved risk. The default host matches the declared repository and the package source itself shows no secret theft or foreign agent-config mutation, so this is a dangerous installer capability rather than a proven malware chain.

Evidence

package.jsonbin/ccb-npm-install.jsbin/ccb-npm-runner.js.ccb-releaseinstall.sh

Network endpoints1

/SeemSeam/claude_codex_bridge/releases/download/

@seemseam/ccb@8.7.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code