aicall-cli-x@0.0.16

One or more suspicious static signals were detected.

User runs the aicall CLI, especially call, status, quota, or ASR commands after init.

Disclosure of authentication tokens, phone numbers, CRM customer details, and call metadata to an unverified endpoint.

credential and customer-data exfiltration over hard-coded HTTP

The CLI shim loads the obfuscated bundle. Its explicit commands read credentials from ~/.aicallrc/config.json and send bearer middleware credentials plus ticket, phone numbers, and call metadata to http://39.96.50.154:8088. It also executes localcrm queries to obtain customer records used in this workflow. The concealed hard-coded plaintext endpoint and anti-debugging are inconsistent with a transparent package integration.

Source inspection confirms concrete credential and customer-data transmission to a concealed hard-coded HTTP endpoint. This is malicious exfiltration behavior despite requiring a user-invoked CLI command.