registry / aicall-cli-x / 0.0.17

aicall-cli-x@0.0.17

AI 外呼 CLI

AI Security Review

scanned 14d ago · by lpm-firewall-ai

On explicit aicall use, the package loads an anti-debug obfuscated bundle. It can collect CRM customer fields and send phone numbers plus a ticket to a hard-coded HTTP service.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the aicall CLI or its commands.

Impact

Customer contact data and configured ticket may be disclosed to an opaque remote service.

Mechanism

Obfuscated CRM collection and HTTP POST through a hard-coded middleware endpoint.

Rationale

No lifecycle hook establishes automatic install-time compromise, but the obfuscated anti-analysis code, hard-coded HTTP endpoint, CRM access, and transmission of phone data with a ticket are unresolved and unsafe.

Evidence

package.jsonbin/aicall.jsdist/bundle.cjs~/.aicallrc

Network endpoints1

39.96.50.154:8088

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Obfuscated bundle exits when inspection/debug flags are detected.
The user-invoked CLI loads the obfuscated bundle.
Bundle defaults requests to http://39.96.50.154:8088.
It POSTs phone numbers and a configured ticket to /call.
Bundle invokes localcrm commands and handles customer phone/name/company data.

Evidence against

package.json has no preinstall, install, or postinstall hook.
Observed network and CRM operations are reachable through explicit CLI functionality, not package installation.

Behavioral surface

Source

DynamicRequireFilesystem

Supply chain

HighEntropyStringsMinified

Manifest

NoLicense

scanned 2 file(s), 313 KB of source

Source & flagged code

6 flagged

bin/aicall.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

3/**

4 * AI 外呼 CLI 入口（shim）

5 *

6 * 优先加载混淆后的 dist/bundle.cjs（构建产物），

7 * 不存在时降级到原始源码（开发模式）。

8 */

10import { existsSync } from 'fs';

11import { createRequire } from 'module';

12import { fileURLToPath } from 'url';

13import { dirname, resolve } from 'path';

15const __dirname = dirname(fileURLToPath(import.meta.url));

16const distBundle = resolve(__dirname, '../dist/bundle.cjs');

18if (existsSync(distBundle)) {

19 const require = createRequire(import.meta.url);

20 require(distBundle);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicall.jsView on unpkg · L18

21} else {

22 await import('../src/cli.js');

23}

dist/bundle.cjsView file

Lines 1-2javascript

1#!/usr/bin/env node

2(function(){try{var A1hB2Ug1=typeof process!=='undefined'&&process;if(A1hB2Ug1&&(A1hB2Ug1.argv.join(' ').match(/inspect|debug|--dev/

Source & flagged code

6 flagged · loading source

bin/aicall.jsView file

18if (existsSync(distBundle)) { L19: const require = createRequire(import.meta.url); L20: require(distBundle);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aicall.jsView on unpkg · L18

dist/bundle.cjsView file

1#!/usr/bin/env node L2: (function(){try{var A1hB2Ug1=typeof process!=='undefined'&&process;if(A1hB2Ug1&&(A1hB2Ug1.argv.join(' ').match(/inspect|debug|--dev/)||(A1hB2Ug1.env.NODE_OPTIONS||'').match(/inspec...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/bundle.cjsView on unpkg · L1

2(function(){try{var A1hB2Ug1=typeof process!=='undefined'&&process;if(A1hB2Ug1&&(A1hB2Ug1.argv.join(' ').match(/inspect|debug|--dev/)||(A1hB2Ug1.env.NODE_OPTIONS||'').match(/inspect|debug/))){A1hB2Ug1.exit(0);}}catch(PI5NOr4UHs){}})();

Medium

Ai Review Evidence

Findings

1 High6 Medium4 Low

HighObfuscated Payload Loaderdist/bundle.cjs

MediumDynamic Requirebin/aicall.js

MediumStructural Risk Force Deep Review

MediumAi Review Evidencedist/bundle.cjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License