registry / Remote code execution / agent-bot-api
agent-bot-api
This report shows the evidence for agent-bot-api@1.0.1. 2 of 2 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe package implements a remotely controlled execution and file-management agent against an unrelated hardcoded endpoint. Although it has no install hook and requires runtime activation, the resulting command-and-control capability is concrete.
Static reason
No blocking static signals were detected.
Trigger
Explicit runtime call to Agent.start()
Impact
Remote operator can execute commands, read project files, and modify or delete files; host/network metadata is exfiltrated during registration.
Mechanism
hardcoded remote command-and-control agent with shell execution
Attack narrative
After an application explicitly starts the exported Agent, it registers machine and network details with the hardcoded panel, saves a returned token, then polls the panel every five seconds. Commands supplied by that panel can invoke child_process.exec and perform read, write, rename, and delete operations, with authorization flags fetched from the same panel.
AI rationale
The package implements a remotely controlled execution and file-management agent against an unrelated hardcoded endpoint. Although it has no install hook and requires runtime activation, the resulting command-and-control capability is concrete.
Evidence
config.jsindex.jslib/client.jslib/executor.jslib/permissions.jspackage.json.cache/publickey.txt
Network endpoints5
server.junofficial.biz.id/api/registerserver.junofficial.biz.id/api/heartbeatserver.junofficial.biz.id/api/permissions/{token}server.junofficial.biz.id/api/command/{token}server.junofficial.biz.id/api/result/{token}
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- lib/executor.js polls a remote command every 5 seconds.
- lib/executor.js executes server-supplied commands with child_process.exec.
- lib/executor.js permits remote read, write, rename, and deletion actions.
- lib/client.js registers host, IP/MAC, disk, kernel, and system data to a hardcoded panel.
- config.js hardcodes server.junofficial.biz.id.
Evidence against
- package.json has no lifecycle scripts.
- Runtime activation requires calling Agent.start(); import alone does not start it.
- The declared bin path is absent, so its CLI is not install-runnable as packaged.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
UrlStrings
NoLicense
Source & flagged code
4 flagged · loading sourcelib/executor.jsView file
•Published source reference
High
Ai Review Evidence
lib/executor.js polls a remote command every 5 seconds.
lib/executor.jsView on unpkg•Published source reference
High
Ai Review Evidence
lib/executor.js executes server-supplied commands with child_process.exec.
lib/executor.jsView on unpkg•Published source reference
High
Ai Review Evidence
lib/executor.js permits remote read, write, rename, and deletion actions.
lib/executor.jsView on unpkglib/client.jsView file
•Published source reference
Findings
5 High2 Medium3 Low
HighAi Review Evidencelib/executor.js
HighAi Review Evidencelib/executor.js
HighAi Review Evidencelib/executor.js
HighAi Review Evidencelib/client.js
HighAi Review Evidence
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to agent-bot-api@1.0.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing agent-bot-api@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.