{
  "schema_version": "1.6.0",
  "id": "CLR-2026-3067",
  "modified": "2026-10-14T12:00:00Z",
  "published": "2026-10-14T12:00:00Z",
  "summary": "@aicommander/agent — a declared remote-execution agent whose RAT-class capability (remote root shell-as-a-service) warrants a malware classification",
  "details": "The npm package @aicommander/agent is the host-side agent for the commercial “AI Commander” service (aicommander.dev). It is a declared remote-execution tool — by its own description it lets AI agents “run shell commands and detached long-running jobs” on your machine, with elevation via a privileged helper and installed persistence. codelake classifies it malicious on a capability basis: it ships Remote-Access-Trojan-class capability to developer and production hosts. No covert reverse shell, dropper or third-party exfiltration was found — this is a judgment about dangerous capability, not hidden theft.",
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "@aicommander/agent"
      },
      "versions": [
        "1.0.34 – 1.5.0 (all published versions)"
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://research.codelake.dev/advisories/clr-2026-3067-aicommander-agent"
    }
  ],
  "credits": [
    {
      "name": "Sascha Klein, codelake Research",
      "type": "FINDER",
      "contact": [
        "https://research.codelake.dev"
      ]
    }
  ],
  "database_specific": {
    "caseId": "CLR-2026-3067",
    "kind": "malware",
    "class": "Remote-execution agent · RAT-class capability",
    "severity": "High",
    "status": "Classified malicious (capability-based)",
    "iocs": {
      "ips": [
        "127.0.0.1"
      ],
      "hashes": [],
      "indicators": [
        "Control plane: aicommander.dev (vendor-owned, host-locked in code; authenticated WSS relay)",
        "Remote shell-command execution on the host, delivered over the relay (declared exec capability)",
        "Privilege elevation via a local privileged helper (loopback 127.0.0.1 / unix-socket IPC) — commands can run as root / LocalSystem",
        "Installed persistence: systemd scope · macOS launch daemon · Windows scheduled task",
        "Bundled native execution launcher dist-native/aicommander-win-exec-x64.exe (shipped in the tarball, invoked locally)",
        "NOT observed: covert reverse shell · remote-fetch dropper · third-party data exfiltration"
      ]
    }
  }
}