Loading npm security reports…

aclade-agent@1.0.6: Suspicious npm security report (Warn) | LPM Firewall

registry / aclade-agent / 1.0.6

aclade-agent@1.0.6

Aclade Local AI Agent Connector

AI Security Review

scanned 8d ago · by lpm-firewall-ai

An explicitly launched, token-authenticated daemon accepts tasks from its configured server. Those tasks can run shell commands and return their output, creating a remote-control channel over the host.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs aclade-agent connect with a token, then the daemon polls for tasks.

Impact

Configured server can execute commands, read or modify accessible files, schedule commands, and receive results.

Mechanism

remote task-driven shell and filesystem control

Rationale

This is a real, high-impact remote administration capability, but source inspection shows it is activated by an explicit CLI invocation and has no install-time execution. The code supports the declared connector purpose, so malicious intent is not established.

Evidence

package.jsonsrc/index.tsdist/index.js~/.aclade-agent.json~/.aclade-agent.log

Network endpoints3

aclade.com/api/connector/pollaclade.com/api/connector/respondregistry.npmjs.org/aclade-agent/latest

OSV Corroboration

OpenSSF/OSV

Source & flagged code

4 flagged

dist/index.jsView file

Lines 18-58javascript

18});

19var __importStar = (this && this.__importStar) || (function () {

20 var ownKeys = function(o) {

21 ownKeys = Object.getOwnPropertyNames || function (o) {

22 var ar = [];

23 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

24 return ar;

25 };

26 return ownKeys(o);

27 };

28 return function (mod) {

29 if (mod && mod.__esModule) return mod;

30 var result = {};

31 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

32 __setModuleDefault(result, mod);

33 return result;

34 };

35})();

36Object.defineProperty(exports, "__esModule", { value: true });

37const http = __importStar(require("http"));

38const https = __importStar(require("https"));

39const child_process = __importStar(require("child_process"));

40const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L38

41const path = __importStar(require("path"));

42const os = __importStar(require("os"));

43const transformers_1 = require("@xenova/transformers");

44const cron = __importStar(require("node-cron"));

45// Disable local model downloading if we only want to fetch from HF,

46// or let it download once and cache locally (preferred).

47transformers_1.env.allowLocalModels = true;

48const pkgPath = path.join(__dirname, "..", "package.json");

49const CURRENT_VERSION = fs.existsSync(pkgPath) ? JSON.parse(fs.readFileSync(pkgPath, "utf-8")).version : "1.0.4";

50function parseArgs() {

51 const args = process.argv.slice(2);

52 let token = "";

53 let host = "https://aclade.com";

54 for (let i = 0; i < args.length; i++) {

55 if (args[i] === "--token" && args[i + 1]) {

56 token = args[i + 1];

57 i++;

58 }

Lines 105-145javascript

105 }

106 req.end();

107 });

108}

109// Global ML model cache

110let embedder = null;

111async function getEmbedder() {

112 if (

Lines 257-297javascript

257 }

258}

259async function pollLoop(token, host) {

260 console.log(`=> Connected to ${host}. Waiting for instructions from Aclade Cloud...`);

261 let lastUpdateCheck = 0;

src/index.tsView file

Lines 1-22typescript

1#!/usr/bin/env node

2

3import * as http from "http";

4import * as https from "https";

5import *