registry / aivibeclaw / 2026.7.2

aivibeclaw@2026.7.2

Multi-channel AI gateway with extensible messaging integrations

AI Security Review

scanned 8d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. Lifecycle hooks perform package-aligned warnings, git hook setup for source checkouts, dist cleanup/hotfixes, and AivibeClaw plugin registry migration without observed exfiltration.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install lifecycle or running the aivibeclaw CLI

Impact

package-local cleanup and AivibeClaw state migration; no confirmed credential theft, persistence, or network exfiltration

Mechanism

package maintenance and CLI bootstrap behavior

Rationale

Direct inspection found high-risk primitives, but they are bounded lifecycle maintenance for this AI gateway package and do not show covert network, credential harvesting, destructive arbitrary paths, or AI-agent control hijack. The package should not be blocked based on the inspected source.

Evidence

package.jsonscripts/preinstall-package-manager-warning.mjsscripts/prepare-git-hooks.mjsscripts/postinstall-bundled-plugins.mjsaivibeclaw.mjsdist/index.jsdist/plugin-registry-migration-DLxaneSy.jsdist/installed-plugin-index-store-KV2qxlBY.js

Decision evidence

public snapshot

AI called this Clean at 82.0% confidence as Benign with medium false-positive risk.

Evidence for block

Install lifecycle scripts exist: preinstall, prepare, postinstall in package.json.
postinstall can delete stale package dist files and legacy plugin dependency dirs with root/symlink safety checks.
postinstall can migrate installed plugin registry into the AivibeClaw state SQLite DB.
prepare runs git config core.hooksPath only when a git worktree and git-hooks dir exist.

Evidence against

preinstall only emits a non-pnpm warning; no network or file writes.
postinstall comments and code say plugin deps are not installed during lifecycle; no npm/network execution seen.
postinstall path operations are bounded by package dist, node_modules/baileys hotfix, or AivibeClaw state migration/cleanup.
dist/index.js only loads CLI runtime when main; import path is inert aside from dynamic import of library exports.
Scanner secret/unicode hits appear to be bundled dependency/runtime code; no hardcoded exfiltration credential or Trojan Source control found in inspected file.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4,699 file(s), 53.7 MB of source, external domains: 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, a2ui.org, account.minimax.io, account.minimaxi.com, accounts.feishu.cn, accounts.google.com, accounts.larksuite.com, ai.azure.com, ai.ollama.com, aiplatform.googleapis.com, aistudio.google.com, aivibeclaw.com, aka.ms, albumart.url, api-dashboard.search.brave.com, api-data.line.me, api.anthropic.com, api.botframework.azure.cn, api.botframework.com, api.botframework.us, api.chutes.ai, api.cohere.ai, api.deepgram.com, api.deepseek.com, api.dev.runwayml.com, api.example.com, api.github.com, api.individual.githubcopilot.com, api.line.me, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.novita.ai, api.openai.com, api.pluralkit.me, api.push.apple.com, api.qrserver.com, api.sandbox.push.apple.com, api.search.brave.com, api.senseaudio.cn, api.synthetic.new, api.telegram.org, api.together.xyz, api.twilio.com, api.twitch.tv

Source & flagged code

21 flagged

package.jsonView file

Lines 1702-1742json

1702 "plugin-sdk:api:check": "node --max-old-space-size=8192 --import tsx scripts/generate-plugin-sdk-api-baseline.ts --check",

1703 "plugin-sdk:api:gen": "node --max-old-space-size=8192 --import tsx scripts/generate-plugin-sdk-api-baseline.ts --write",

1704 "plugin-sdk:check-exports": "node scripts/sync-plugin-sdk-exports.mjs --check",

1705 "plugin-sdk:surface": "node --max-old-space-size=8192 scripts/plugin-sdk-surface-report.mjs",

1706 "plugin-sdk:surface:check": "node --max-old-space-size=8192 scripts/plugin-sdk-surface-report.mjs --check",

1707 "plugin-sdk:sync-exports": "node scripts/sync-plugin-sdk-exports.mjs",

1708 "plugin-sdk:usage": "node --max-old-space-size=8192 --import tsx scripts/analyze-plugin-sdk-usage.ts",

1709 "policy:config-coverage": "node --import tsx scripts/check-policy-config-coverage.ts",

1710 "plugins:boundary-report": "node --import tsx scripts/plugin-boundary-report.ts",

1711 "plugins:boundary-report:ci": "node --import tsx scripts/plugin-boundary-report.ts --summary --fail-on-cross-owner --fail-on-unclassified-unused-reserved --fail-on-eligible-compat",

1712 "plugins:boundary-report:json": "node --import tsx scripts/plugin-boundary-report.ts --json",

1713 "plugins:boundary-report:summary": "node --import tsx scripts/plugin-boundary-report.ts --summary",

1714 "plugins:assets:build": "node scripts/bundled-plugin-assets.mjs --phase build",

1715 "plugins:assets:copy": "node scripts/bundled-plugin-assets.mjs --phase copy",

1716 "plugins:inventory:check": "node scripts/generate-plugin-inventory-doc.mjs --check",

1717 "plugins:inventory:gen": "node scripts/generate-plugin-inventory-doc.mjs --write",

1718 "plugins:sync": "node --import tsx scripts/sync-plugin-versions.ts",

1719 "plugins:sync:check": "node --import tsx scripts/sync-plugin-versions.ts --check",

1720 "postinstall": "node scripts/postinstall-bundled-plugins.mjs",

1721 "postpack": "node scripts/package-changelog.mjs restore",

1722 "preinstall": "node scripts/preinstall-package-manager-warning.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L1722

1723 "prepack": "node --import tsx scripts/aivibeclaw-prepack.ts",

1724 "prepare": "node scripts/prepare-git-hooks.mjs",

1725 "prepush:ci": "bash scripts/prepush-ci.sh",

1726 "probe:anthropic:prompt": "node --import tsx scripts/anthropic-prompt-probe.ts",

1727 "prompt:snapshots:check": "node --import tsx scripts/generate-prompt-snapshots.ts --check",

1728 "prompt:snapshots:gen": "node --import tsx scripts/generate-prompt-snapshots.ts --write",

1729 "prompt:snapshots:sync-codex-model": "node --import tsx scripts/sync-codex-model-prompt-fixture.ts",

1730 "protocol:check": "pnpm protocol:gen && pnpm protocol:gen:swift && git diff --exit-code -- dist/protocol.schema.json apps/macos/Sources/AivibeClawProtocol/GatewayModels.swift apps/shared/AivibeClawKit/Sources/AivibeClawProtocol/GatewayModels.swift",

1731 "protocol:gen": "node --import tsx scripts/protocol-gen.ts",

1732 "protocol:gen:swift": "node --import tsx scripts/protocol-gen-swift.ts",

1733 "proxy:coverage": "node scripts/run-node.mjs proxy coverage",

1734 "proxy:gateway": "node scripts/run-node.mjs proxy run -- node scripts/run-node.mjs gateway",

1735 "proxy:install-ca": "node --import tsx scripts/proxy-install-ca.mjs",

1736 "proxy:run": "node scripts/run-node.mjs proxy run",

1737 "proxy:start": "node scripts/run-node.mjs proxy start",

1738 "qa:e2e": "node --import tsx scripts/qa-e2e.ts",

1739 "qa:lab:build": "vite build --config extensions/qa-lab/web/vite.config.ts",

1740 "qa:lab:ui": "pnpm aivibeclaw qa ui",

1741 "qa:lab:up": "node --import tsx scripts/qa-lab-up.ts",

1742 "qa:lab:up:fast": "node --import tsx scripts/qa-lab-up.ts --use-prebuilt-image --bind-ui-dist --skip-ui-build",

dist/dist-CdD4a7gg.jsView file

5588patternName = private_key_rsa severity = critical line = 5588 matchedText = if (type...g");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/dist-CdD4a7gg.jsView on unpkg · L5588

5588patternName = private_key_rsa severity = critical line = 5588 matchedText = if (type...g");

Critical

Secret Pattern

RSA private key in dist/dist-CdD4a7gg.js

dist/dist-CdD4a7gg.jsView on unpkg · L5588

13656patternName = generic_password severity = medium line = 13656 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/dist-CdD4a7gg.js

dist/dist-CdD4a7gg.jsView on unpkg · L13656

21205patternName = generic_password severity = medium line = 21205 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/dist-CdD4a7gg.js

dist/dist-CdD4a7gg.jsView on unpkg · L21205

scripts/postinstall-bundled-plugins.mjsView file

Lines 798-838javascript

798 const baileysResult = applyBaileysEncryptedStreamFinishHotfix(params);

799 if (baileysResult.applied) {

800 log.log("[postinstall] patched baileys runtime hotfixes");

801 return;

802 }

803 if (baileysResult.reason !== "missing"

dist/launchd-DrKxjPQa.jsView file

Lines 1-40javascript

1import { a as normalizeLowercaseStringOrEmpty, c as normalizeOptionalString } from "./string-coerce-DW4mBlAt.js";

2import { b as parseStrictPositiveInteger, v as parseStrictInteger } from "./number-coercion-CJQ8TR--.js";

3import "./parse-finite-number-Z7n6tXLk.js";

4import { t as sanitizeForLog } from "./ansi-zQGMgESZ.js";

dist/control-ui/assets/config-runtime-Chws_C6h.jsView file

Lines 1-22javascript

1var e={Space_Separator:/[\u1680\u2000-\u200A\u202F\u205F\u3000]/,ID_Start:/[\xAA\xB5\xBA\xC0-\xD6\xD8-\xF6\xF8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377\u037A-\u037D\u037F\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5\u03F7-\u0481\u048A-\u052F\u0531-\u0556\u0559\u0561-

deploy/announce-control-center.shView file

•path = deploy/announce-control-center.sh kind = build_helper sizeBytes = 3778 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy/announce-control-center.shView on unpkg

apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jarView file

•path = apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar kind = high_entropy_blob sizeBytes = 43583 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jarView on unpkg

•path = apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar kind = compressed_blob sizeBytes = 43583 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jarView on unpkg

•path = apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar kind = nested_archive_needs_inspection sizeBytes = 43583 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jarView on unpkg

dist/i18n-2H5-8AI2.jsView file

Lines 1-31javascript

1//#endregion

2//#region src/wizard/i18n/index.ts

3const LOCALES = {

4 en: {

5 common: {

6 back: "Back",

7 done: "Done",

8 docs: "Docs:",

9 finished: "Finished",

dist/proxy-cli.runtime-BwJDobZm.jsView file

856patternName = generic_password severity = medium line = 856 matchedText = url.pass...ed";

Medium

Secret Pattern

Hardcoded password in dist/proxy-cli.runtime-BwJDobZm.js

dist/proxy-cli.runtime-BwJDobZm.jsView on unpkg · L856

docs/help/faq.mdView file

1511patternName = generic_password severity = medium line = 1511 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/help/faq.md

docs/help/faq.mdView on unpkg · L1511

docs/gateway/tailscale.mdView file

118patternName = generic_password severity = medium line = 118 matchedText = auth: { ..." },

Medium

Secret Pattern

Hardcoded password in docs/gateway/tailscale.md

docs/gateway/tailscale.mdView on unpkg · L118

docs/gateway/configuration-reference.mdView file

515patternName = generic_password severity = medium line = 515 matchedText = // passw...WORD

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L515

545patternName = generic_password severity = medium line = 545 matchedText = // passw...rd",

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L545

docs/gateway/config-channels.mdView file

756patternName = generic_password severity = medium line = 756 matchedText = password...D}",

Medium

Secret Pattern

Hardcoded password in docs/gateway/config-channels.md

docs/gateway/config-channels.mdView on unpkg · L756

docs/channels/matrix.mdView file

74patternName = generic_password severity = medium line = 74 matchedText = password...cret

Medium

Secret Pattern

Hardcoded password in docs/channels/matrix.md

docs/channels/matrix.mdView on unpkg · L74

docs/channels/irc.mdView file

206patternName = generic_password severity = medium line = 206 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/channels/irc.md

docs/channels/irc.mdView on unpkg · L206

Source & flagged code

21 flagged · loading source

package.jsonView file

•scripts.preinstall = node scripts/preinstall-package-manager-warning.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/dist-CdD4a7gg.jsView file

5588patternName = private_key_rsa severity = critical line = 5588 matchedText = if (type...g");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/dist-CdD4a7gg.jsView on unpkg · L5588

5588patternName = private_key_rsa severity = critical line = 5588 matchedText = if (type...g");

Critical

Secret Pattern

RSA private key in dist/dist-CdD4a7gg.js

dist/dist-CdD4a7gg.jsView on unpkg · L5588

13656patternName = generic_password severity = medium line = 13656 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/dist-CdD4a7gg.js

dist/dist-CdD4a7gg.jsView on unpkg · L13656

21205patternName = generic_password severity = medium line = 21205 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/dist-CdD4a7gg.js

dist/dist-CdD4a7gg.jsView on unpkg · L21205

scripts/postinstall-bundled-plugins.mjsView file

818} L819: const importModule = params.importModule ?? ((specifier) => import(specifier)); L820: return await importModule(resolveDistModuleUrl(packageRoot, distPath));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/postinstall-bundled-plugins.mjsView on unpkg · L818

dist/launchd-DrKxjPQa.jsView file

20import os from "node:os"; L21: import { spawn } from "node:child_process"; L22: //#region src/daemon/launchd-current-service.ts ... L24: /** Checks whether the current process appears to be running under the requested launchd label. */ L25: function [redacted](label, env = process.env, options = {}) { L26: const currentLabels = [ ... L144: } L145: function buildLaunchAgentPlist$1({ label, comment, programArguments, workingDirectory, stdoutPath, stderrPath, environment }) { L146: const argsXml = programArguments.map((arg) => `\n <string>${plistEscape(arg)}</string>`).join(""); ... L189: const label = resolveLaunchAgentLabel$1(env); L190: const home = normalizeOptionalString(env.HOME) || os.homedir(); L191: return {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/launchd-DrKxjPQa.jsView on unpkg · L20

dist/control-ui/assets/config-runtime-Chws_C6h.jsView file

2contains invisible/control Unicode U+FEFF (zero width no-break space) `?(o++,s=0):e?s+=e.length:s++,e&&(a+=e.length),e}var te={default(){switch(_){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case`<U+FEFF>`:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/config-runtime-Chws_C6h.jsView on unpkg · L2

deploy/announce-control-center.shView file

•path = deploy/announce-control-center.sh kind = build_helper sizeBytes = 3778 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy/announce-control-center.shView on unpkg

apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jarView file

•path = apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar kind = high_entropy_blob sizeBytes = 43583 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jarView on unpkg

•path = apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar kind = compressed_blob sizeBytes = 43583 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jarView on unpkg

•path = apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar kind = nested_archive_needs_inspection sizeBytes = 43583 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

apps/zoozoo-android/gradle/wrapper/gradle-wrapper.jarView on unpkg

dist/i18n-2H5-8AI2.jsView file

11patternName = generic_password severity = medium line = 11 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in dist/i18n-2H5-8AI2.js

dist/i18n-2H5-8AI2.jsView on unpkg · L11

dist/proxy-cli.runtime-BwJDobZm.jsView file

856patternName = generic_password severity = medium line = 856 matchedText = url.pass...ed";

Medium

Secret Pattern

Hardcoded password in dist/proxy-cli.runtime-BwJDobZm.js

dist/proxy-cli.runtime-BwJDobZm.jsView on unpkg · L856

docs/help/faq.mdView file

1511patternName = generic_password severity = medium line = 1511 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/help/faq.md

docs/help/faq.mdView on unpkg · L1511

docs/gateway/tailscale.mdView file

118patternName = generic_password severity = medium line = 118 matchedText = auth: { ..." },

Medium

Secret Pattern

Hardcoded password in docs/gateway/tailscale.md

docs/gateway/tailscale.mdView on unpkg · L118

docs/gateway/configuration-reference.mdView file

515patternName = generic_password severity = medium line = 515 matchedText = // passw...WORD

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L515

545patternName = generic_password severity = medium line = 545 matchedText = // passw...rd",

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L545

docs/gateway/config-channels.mdView file

756patternName = generic_password severity = medium line = 756 matchedText = password...D}",

Medium

Secret Pattern

Hardcoded password in docs/gateway/config-channels.md

docs/gateway/config-channels.mdView on unpkg · L756

docs/channels/matrix.mdView file

74patternName = generic_password severity = medium line = 74 matchedText = password...cret

Medium

Secret Pattern

Hardcoded password in docs/channels/matrix.md

docs/channels/matrix.mdView on unpkg · L74

docs/channels/irc.mdView file

206patternName = generic_password severity = medium line = 206 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/channels/irc.md

docs/channels/irc.mdView on unpkg · L206

Findings

3 Critical2 High19 Medium9 Low

CriticalCritical Secretdist/dist-CdD4a7gg.js

CriticalTrojan Source Unicodedist/control-ui/assets/config-runtime-Chws_C6h.js

CriticalSecret Patterndist/dist-CdD4a7gg.js

HighInstall Time Lifecycle Scriptspackage.json

HighShips High Entropy Blobapps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar

MediumDynamic Requirescripts/postinstall-bundled-plugins.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/launchd-DrKxjPQa.js

MediumProtestware

MediumShips Build Helperdeploy/announce-control-center.sh

MediumShips Compressed Blobapps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/i18n-2H5-8AI2.js

MediumSecret Patterndist/dist-CdD4a7gg.js

MediumSecret Patterndist/proxy-cli.runtime-BwJDobZm.js

MediumSecret Patterndocs/help/faq.md

MediumSecret Patterndocs/gateway/tailscale.md

MediumSecret Patterndocs/gateway/configuration-reference.md

MediumSecret Patterndocs/gateway/config-channels.md

MediumSecret Patterndocs/channels/matrix.md

MediumSecret Patterndocs/channels/irc.md

LowNon Install Lifecycle Scripts

LowScripts Present

LowEval

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNested Archive Needs Inspectionapps/zoozoo-android/gradle/wrapper/gradle-wrapper.jar