registry / @seemseam/ccb / 8.7.5

@seemseam/ccb@8.7.5

Lightweight multi-agent TUI and stable cross-provider collaboration layer for Codex, Claude, Gemini, Grok, Kimi, and other CLI agents.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

No concrete attack was identified in the inspected JavaScript. The package downloads and bootstraps its own release, then delegates explicit CLI commands to it.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall installs the runtime; invoking a packaged CLI also checks installation.

Impact

The visible behavior installs and launches the package runtime; no credential harvesting, exfiltration, or broad agent-control mutation was identified.

Mechanism

The installer downloads a versioned archive and checks its checksum, extracts it into the package, and runs its runtime bootstrap with optional integrations disabled.

AI rationale

The inspected entrypoints implement a transparent, package-aligned release installer and CLI launcher without concrete malicious behavior. The external release remains outside the static inspection scope, but that limitation alone does not establish an attack.

Network endpoints1

github.com/SeemSeam/claude_codex_bridge/releases/download/v${version}

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

@seemseam/ccb@8.7.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code