registry / aicall-cli-x / 0.0.15

aicall-cli-x@0.0.15

AI 外呼 CLI

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

User-invoked commands submit phone numbers and configured credentials to a remote calling middleware. The package is obfuscated and uses a hard-coded plaintext HTTP endpoint, creating unresolved confidentiality risk.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs aicall init, call, status, or related CLI commands.

Impact

Configured tickets and requested customer phone data can be transmitted to the hard-coded endpoint.

Mechanism

User-invoked credentialed API calls for outbound calling

Rationale

No install-time or covert execution establishes malware, but the obfuscated credentialed calling client exposes sensitive data to a hard-coded unencrypted endpoint. Warn pending trust validation of that endpoint and distribution.

Evidence

package.jsonbin/aicall.jsdist/bundle.cjs~/.aicallrc/config.json

Network endpoints1

39.96.50.154:8088

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

dist/bundle.cjs is heavily obfuscated and exits under inspection/debug flags.
The CLI sends phone lists and a configured ticket to hard-coded HTTP http://39.96.50.154:8088.
The init command persists supplied credentials in ~/.aicallrc/config.json.

Evidence against

package.json has no install lifecycle hooks.
bin/aicall.js runs only when the user invokes the aicall command.
Network calls implement documented user-invoked outbound-call/status commands; no hidden import-time call was found.
No payload download, eval, destructive action, or AI-agent configuration mutation was found.

Behavioral surface

Source

DynamicRequireFilesystem

Supply chain

HighEntropyStringsMinified

Manifest

NoLicense

scanned 2 file(s), 271 KB of source

Source & flagged code

2 flagged

bin/aicall.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

3/**

4 * AI 外呼 CLI 入口（shim）

5 *

6 * 优先加载混淆后的 dist/bundle.cjs（构建产物），

7 * 不存在时降级到原始源码（开发模式）。

8 */

10import { existsSync } from 'fs';

11import { createRequire } from 'module';

12import { fileURLToPath } from 'url';

13import { dirname, resolve } from 'path';

15const __dirname = dirname(fileURLToPath(import.meta.url));

16const distBundle = resolve(__dirname, '../dist/bundle.cjs');

18if (existsSync(distBundle)) {

19 const require = createRequire(import.meta.url);

20 require(distBundle);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicall.jsView on unpkg · L18

21} else {

22 await import('../src/cli.js');

23}

dist/bundle.cjsView file

Lines 1-2javascript

1#!/usr/bin/env node

2(function(){try{var ILzVfZ=typeof process!=='undefined'&&process;if(ILzVfZ&&(ILzVfZ.argv.join(' ').match(/inspect|debug|--dev/

Source & flagged code

2 flagged · loading source

bin/aicall.jsView file

18if (existsSync(distBundle)) { L19: const require = createRequire(import.meta.url); L20: require(distBundle);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicall.jsView on unpkg · L18

dist/bundle.cjsView file

1#!/usr/bin/env node L2: (function(){try{var ILzVfZ=typeof process!=='undefined'&&process;if(ILzVfZ&&(ILzVfZ.argv.join(' ').match(/inspect|debug|--dev/)||(ILzVfZ.env.NODE_OPTIONS||'').match(/inspect|debug/...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/bundle.cjsView on unpkg · L1

Findings

1 High2 Medium4 Low

HighObfuscated Payload Loaderdist/bundle.cjs

MediumDynamic Requirebin/aicall.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License