Loading npm security reports…

aclade-agent@1.0.5: Suspicious npm security report (Warn) | LPM Firewall

registry / aclade-agent / 1.0.5

aclade-agent@1.0.5

Aclade Local AI Agent Connector

AI Security Review

scanned 8d ago · by lpm-firewall-ai

An explicitly started, token-authenticated daemon accepts cloud-supplied tasks with shell execution, filesystem read/write, and recursive listing capabilities. Results, including command output and file contents, are returned to Aclade.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs aclade-agent connect with a token.

Impact

A compromised or abusive Aclade backend/token can execute commands, alter files, and exfiltrate local data.

Mechanism

Remote task polling with arbitrary local command and filesystem capabilities.

Rationale

The package implements a powerful remote administration connector with concrete RCE and data-exfiltration capability. Its activation is explicit and documented, so the source supports a warning rather than a malicious-install block.

Evidence

package.jsonsrc/index.tsdist/index.jsREADME.md~/.aclade-agent.json~/.aclade-agent.log

Network endpoints2

aclade.comregistry.npmjs.org/aclade-agent/latest

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-13614

Source & flagged code

5 flagged · loading source

dist/index.jsView file

38const https = __importStar(require("https")); L39: const child_process = __importStar(require("child_process")); L40: const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L38

124const proc = child_process.spawn(input.command, [], { L125: shell: true, L126: stdio: ['ignore', 'pipe', 'pipe']

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L124

36Object.defineProperty(exports, "__esModule", { value: true }); L37: const http = __importStar(require("http")); L38: const https = __importStar(require("https")); L39: const child_process = __importStar(require("child_process")); L40: const fs = __importStar(require("fs")); ... L46: transformers_1.env.allowLocalModels = true; L47: const pkgPath = path.join(__dirname, "..", "package.json"); L48: const CURRENT_VERSION = fs.existsSync(pkgPath) ? JSON.parse(fs.readFileSync(pkgPath, "utf-8")).version : "1.0.4"; L49: function parseArgs() { ... L102: if (bodyData) { L103: req.write(bodyData); L104: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L36

230try { L231: child_process.execSync("npm install -g aclade-agent@latest", { stdio: "ignore" }); L232: console.log(`=> [UPDATE] Upgrade complete. Restarting agent...`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L230

src/index.tsView file

2Source sends the broad process environment to a literal external destination. L2: L3: import * as http from "http"; L4: import * as https from "https"; L5: import * as child_process from "child_process"; L6: import * as fs from "fs"; ... L14: L15: const pkgPath = path.join(__dirname, "..", "package.json"); L16: const CURRENT_VERSION = fs.existsSync(pkgPath) ? JSON.parse(fs.readFileSync(pkgPath, "utf-8")).version : "1.0.4"; L17: ... L67: if (bodyData) { L68: req.write(bodyData); L69: }

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/index.tsView on unpkg · L2

Source & flagged code

5 flagged

dist/index.jsView file

Lines 16-58javascript

16}) : function(o, v) {

17 o["default"] = v;

18});

19var __importStar = (this && this.__importStar) || (function () {

20 var ownKeys = function(o) {

21 ownKeys = Object.getOwnPropertyNames || function (o) {

22 var ar = [];

23 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

24 return ar;

25 };

26 return ownKeys(o);

27 };

28 return function (mod) {

29 if (mod && mod.__esModule) return mod;

30 var result = {};

31 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

32 __setModuleDefault(result, mod);

33 return result;

34 };

35})();

36Object.defineProperty(exports, "__esModule", { value: true });

37const http = __importStar(require("http"));

38const https = __importStar(require("https"));

39const child_process = __importStar(require("child_process"));

40const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L38

41const path = __importStar(require("path"));

42const os = __importStar(require("os"));

43const transformers_1 = require("@xenova/transformers");

44// Disable local model downloading if we only want to fetch from HF,

45// or let it download once and cache locally (preferred).

46transformers_1.env.allowLocalModels = true;

47const pkgPath = path.join(__dirname, "..", "package.json");

48const CURRENT_VERSION = fs.existsSync(pkgPath) ? JSON.parse(fs.readFileSync(pkgPath, "utf-8")).version : "1.0.4";

49function parseArgs() {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L36

50 const args = process.argv.slice(2);

51 let token = "";

52 let host = "https://aclade.com";

53 for (let i = 0; i < args.length; i++) {

54 if (args[i] === "--token" && args[i + 1]) {

55 token = args[i + 1];

56 i++;

57 }

58 else if (args[i] === "--host" && args[i + 1]) {

Lines 104-144javascript

104 }

105 req.end();

106 });

107}

108// Global ML model cache

109let embedder = null;

110async function getEmbedder() {

111 if (

Lines 210-250javascript

210 }

211}

212async function pollLoop(token, host) {

213 console.log(`=> Connected to ${host}. Waiting for instructions from Aclade Cloud...`);

214 let lastUpdateCheck = 0;

src/index.tsView file

Lines 1-22typescript

1#!/usr/bin/env node

2

3import * as http from "http";

4import * as https from "https";

5import *