registry / automation-tool-manager / 1.9.11

automation-tool-manager@1.9.11

Automation Agent

AI Security Review

scanned 26d ago · by lpm-firewall-ai

Installing the package runs a broad system setup without a separate user command. It downloads and installs dependencies, changes shell startup files, and creates a command wrapper.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation invokes the postinstall hook.

Impact

It can alter the user environment, install software, and expose a bundled private-registry configuration.

Mechanism

Automatic shell-based environment provisioning and persistence.

AI rationale

The package performs substantial unconsented environment and software changes at postinstall time. This is a real install-hook risk but does not meet the evidence threshold for malicious behavior.

Evidence

package.jsonscripts/setup.shtarget/tool-manager-1.4.4.jar$HOME/.automation-tools$HOME/.bashrc$HOME/.zshrc$HOME/.bash_profile$HOME/.profile$HOME/.zprofile/Applications/

Network endpoints5

api.adoptium.netarchive.apache.orgdl.google.comdownload.mozilla.orggit.letitbexai.com

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The install hook automatically runs a shell setup program.
The setup downloads toolchains and browsers, then creates a global command wrapper.
The setup persists environment variables and PATH changes in shell profiles.
The bundled application contains a private npm registry configuration with deploy-token authentication.

Evidence against

The shell script uses named vendor download hosts rather than an opaque command-and-control endpoint.
No source evidence shows collection or exfiltration of user files or environment secrets.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 14.1 KB of source

Source & flagged code

7 flagged

package.jsonView file

Lines 16-41json

16 "generateLegacyBundles": false,

17 "javaVersion": "17",

18 "jar": "target/tool-manager-1.4.4.jar",

19 "javafx": false,

20 "title": "Automation Agent"

21 },

22 "files": [

23 "jdeploy-bundle",

24 "scripts/setup.sh",

25 "target/tool-manager-1.4.4.jar"

26 ],

27 "dependencies": {

28 "command-exists-promise": "^2.0.2",

30 "node-fetch": "2.6.7",

31 "shelljs": "^0.10.0",

32 "tar": "^7.5.12",

33 "vite": "8.0.5",

34 "yauzl": "3.2.1"

35 },

36 "scripts": {

37 "test": "echo \"Error: no test specified\" && exit 1",

38 "postinstall": "sh ./scripts/setup.sh"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L38

39 }

Medium

Suspicious Lifecycle Evidence

The install hook automatically runs a shell setup program.

package.jsonView on unpkg · L36

40}

scripts/setup.shView file

•path = scripts/setup.sh kind = build_helper sizeBytes = 48851 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/setup.shView on unpkg

jdeploy-bundle/jar-runner.jarView file

•path = jdeploy-bundle/jar-runner.jar kind = compressed_blob sizeBytes = 1839 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

jdeploy-bundle/jar-runner.jarView on unpkg

•path = jdeploy-bundle/jar-runner.jar kind = nested_archive_needs_inspection sizeBytes = 1839 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

jdeploy-bundle/jar-runner.jarView on unpkg

jdeploy-bundle/tool-manager-1.4.4.jarView file

•path = jdeploy-bundle/tool-manager-1.4.4.jar kind = high_entropy_blob sizeBytes = 34112083 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

jdeploy-bundle/tool-manager-1.4.4.jarView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = sh ./scripts/setup.sh

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = sh ./scripts/setup.sh

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

36"scripts": { "test": "echo \"Error: no test specified\" && exit 1", "postinstall": "sh ./scripts/setup.sh" }

Medium

Suspicious Lifecycle Evidence

The install hook automatically runs a shell setup program.

package.jsonView on unpkg · L36

scripts/setup.shView file

•path = scripts/setup.sh kind = build_helper sizeBytes = 48851 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/setup.shView on unpkg

jdeploy-bundle/jar-runner.jarView file

•path = jdeploy-bundle/jar-runner.jar kind = compressed_blob sizeBytes = 1839 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

jdeploy-bundle/jar-runner.jarView on unpkg

•path = jdeploy-bundle/jar-runner.jar kind = nested_archive_needs_inspection sizeBytes = 1839 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

jdeploy-bundle/jar-runner.jarView on unpkg

jdeploy-bundle/tool-manager-1.4.4.jarView file

•path = jdeploy-bundle/tool-manager-1.4.4.jar kind = high_entropy_blob sizeBytes = 34112083 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

jdeploy-bundle/tool-manager-1.4.4.jarView on unpkg

Findings

2 High6 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighShips High Entropy Blobjdeploy-bundle/tool-manager-1.4.4.jar

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helperscripts/setup.sh

MediumShips Compressed Blobjdeploy-bundle/jar-runner.jar

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNested Archive Needs Inspectionjdeploy-bundle/jar-runner.jar

Affected versions and remediation

This report applies to automation-tool-manager@1.9.11.

See version security history for other recorded verdicts.

Review the evidence and your use of automation-tool-manager@1.9.11 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-12 21:04:34.372Z (UTC).