registry / aicall-cli-x / 0.0.12

aicall-cli-x@0.0.12

AI 外呼 CLI

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

User-invoked CLI execution reaches obfuscated runtime code. It persists user-supplied calling credentials and makes outbound API calls. Shell command construction leaves a command-injection risk if supplied or CRM-derived fields are attacker-controlled.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs an `aicall` command.

Impact

Potential local shell execution through unescaped command arguments; configured calling credentials are transmitted to the stated service APIs.

Mechanism

Obfuscated outbound-call CLI with concatenated `execSync` shell commands.

Rationale

No install-time or covert attack chain was found, so blocking as malicious is not supported. Obfuscation, anti-debug behavior, and unsafe shell construction justify a warning pending remediation.

Evidence

package.jsonbin/aicall.jsdist/bundle.cjs~/.aicallrc/config.json~/.aicallrc/phone-cache.json

Network endpoints2

cfs-ms.pa18.comcallbot.duofangtongxin.com

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

`dist/bundle.cjs` is heavily obfuscated and exits when inspector/debug flags are present.
`dist/bundle.cjs` calls `child_process.execSync` with shell command strings built by concatenation.
`localcrm` command arguments include runtime values without demonstrated shell escaping.
Explicit CLI commands persist credentials in `~/.aicallrc/config.json` and call outbound-service APIs.

Evidence against

`package.json` has no preinstall, install, postinstall, or prepare lifecycle hook.
`bin/aicall.js` only loads the packaged CLI after the user invokes `aicall`.
Observed network hosts implement the stated AI outbound-calling workflow; no unrelated exfiltration endpoint was found.
No AI-agent control-surface writes, destructive filesystem actions, or remote payload loading were found.

Behavioral surface

Source

DynamicRequireFilesystem

Supply chain

HighEntropyStringsMinifiedProtestware

Source & flagged code

2 flagged

bin/aicall.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

3/**

4 * AI 外呼 CLI 入口（shim）

5 *

6 * 优先加载混淆后的 dist/bundle.cjs（构建产物），

7 * 不存在时降级到原始源码（开发模式）。

8 */

10import { existsSync } from 'fs';

11import { createRequire } from 'module';

12import { fileURLToPath } from 'url';

13import { dirname, resolve } from 'path';

15const __dirname = dirname(fileURLToPath(import.meta.url));

16const distBundle = resolve(__dirname, '../dist/bundle.cjs');

18if (existsSync(distBundle)) {

19 const require = createRequire(import.meta.url);

20 require(distBundle);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicall.jsView on unpkg · L18

21} else {

22 await import('../src/cli.js');

23}

dist/bundle.cjsView file

Lines 1-2javascript

1#!/usr/bin/env node

2(function(){try{var rmBnv9Nda7=typeof process!=='undefined'&&process;if(rmBnv9Nda7&&(rmBnv9Nda7.argv.join(' ').match(/inspect|debug|--dev/

Source & flagged code

2 flagged · loading source

bin/aicall.jsView file

18if (existsSync(distBundle)) { L19: const require = createRequire(import.meta.url); L20: require(distBundle);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicall.jsView on unpkg · L18

dist/bundle.cjsView file

1#!/usr/bin/env node L2: (function(){try{var rmBnv9Nda7=typeof process!=='undefined'&&process;if(rmBnv9Nda7&&(rmBnv9Nda7.argv.join(' ').match(/inspect|debug|--dev/)||(rmBnv9Nda7.env.NODE_OPTIONS||'').match...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/bundle.cjsView on unpkg · L1

Findings

1 High3 Medium4 Low

HighObfuscated Payload Loaderdist/bundle.cjs

MediumDynamic Requirebin/aicall.js

MediumProtestware

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License