aicall-cli-x@0.0.21
AI 外呼 CLI
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo registry lifecycle hook establishes automatic compromise, so blocking under the install-hook policy is not warranted. Opaque runtime code, plaintext credential transmission, and explicit global skill installation warrant a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs aicall commands, especially aicall update or login and calling commands.
Impact
Login credentials, bearer tokens, and call data can be sent to the configured backend; update can alter globally installed command packages.
Mechanism
Obfuscated CLI execution, remote API requests, and shell-based global package installation.
AI rationale
No registry lifecycle hook establishes automatic compromise, so blocking under the install-hook policy is not warranted. Opaque runtime code, plaintext credential transmission, and explicit global skill installation warrant a warning.
Evidence
package.jsonbin/aicall.jsdist/bundle.cjs.aicallrc/config.json
Network endpoints1
39.96.50.154:8088
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The shipped bundle is deliberately obfuscated and contains anti-debug termination logic.
- The CLI loads and executes the opaque bundle when the user runs aicall.
- The user-invoked update command installs localcrm and several global skill packages, including aicall-cli-x.
- The bundle sends supplied login credentials and stored bearer tokens to http://39.96.50.154:8088.
Evidence against
- package.json has no preinstall, install, or postinstall script.
- The network calls and CRM actions are part of the stated outbound-call CLI function and require a user command.
- No source evidence shows automatic execution at package installation.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinified
NoLicense
Source & flagged code
5 flagged · loading sourcebin/aicall.jsView file
18if (existsSync(distBundle)) {
L19: const require = createRequire(import.meta.url);
L20: require(distBundle);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/aicall.jsView on unpkg · L1818if (existsSync(distBundle)) {
const require = createRequire(import.meta.url);
require(distBundle);
} else {
Medium
Ai Review Evidence
The CLI loads and executes the opaque bundle when the user runs aicall.
bin/aicall.jsView on unpkg · L18dist/bundle.cjsView file
1#!/usr/bin/env node
L2: (function(){try{var sWwP8vh5=typeof process!=='undefined'&&process;if(sWwP8vh5&&(sWwP8vh5.argv.join(' ').match(/inspect|debug|--dev/)||(sWwP8vh5.env.NODE_OPTIONS||'').match(/inspec...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/bundle.cjsFindings
1 High6 Medium4 Low
HighObfuscated Payload Loaderdist/bundle.cjs
MediumDynamic Requirebin/aicall.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
MediumAi Review Evidencebin/aicall.js
MediumAi Review Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to aicall-cli-x@0.0.21.
See all versions of aicall-cli-x for other recorded verdicts.
- Review the evidence and your use of aicall-cli-x@0.0.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.