registry / @bobfrankston/rmfmail / 1.2.95

@bobfrankston/rmfmail@1.2.95

Local-first email client with IMAP sync and standalone native app

AI Security Review

scanned 3d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The risky primitives are lifecycle symlinking, a shipped Windows mailto launcher, registry writes, child process use, and network/API access, but inspected call sites are package-aligned and user-invoked or runtime app behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install runs postinstall; CLI/runtime flags activate mail client operations

Impact

No unconsented persistence, exfiltration, destructive action, or AI-agent control hijack confirmed

Mechanism

workspace symlink setup and user-invoked email client integrations

Rationale

Static source inspection shows suspicious primitives, but they serve a local-first email client: install-time code only links package workspaces, while registry/native/update/network behavior is user-invoked or configured application functionality. I found no concrete malicious install-time execution, credential exfiltration, persistence, destructive behavior, or AI-agent control-surface mutation.

Evidence

package.jsonbin/postinstall.jsbin/mailx.jsbin/rmfmailto-src/src/main.rspackages/mailx-service/index.jspackages/mailx-service/google-sync.jspackages/mailx-settings/cloud.jsbin/rmfmailto.exe

Network endpoints7

autoconfig.thunderbird.net/v1.1/www.googleapis.com/gmail.googleapis.com/tasks.googleapis.com/people.googleapis.com/api.anthropic.com/v1/messagesapi.openai.com/v1/chat/completions

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json defines postinstall lifecycle script
bin/mailx.js can copy bin/rmfmailto.exe to %LOCALAPPDATA% and write HKCU mailto registry keys when -register-mailto is invoked
bin/mailx.js includes user-triggered global update path: npm install -g @bobfrankston/rmfmail
packages/mailx-service/index.js can send user text to configured AI providers

Evidence against

bin/postinstall.js only enforces Node version and symlinks package workspace dirs under package node_modules/@bobfrankston
No install-time writes to AI-agent control surfaces, shell startup, VCS hooks, autostart, or foreign project files found
Registry/mailto handler changes are gated by explicit CLI flags, not postinstall/import-time execution
Native bin/rmfmailto.exe has matching Rust source that launches node mailx.js --mailto for OS mailto handling
Network endpoints are package-aligned email/calendar/cloud/AI features and require runtime configuration or user action
No credential harvesting or exfiltration beyond normal configured OAuth/API-key use for an email client found

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 415 file(s), 15.9 MB of source, external domains: 127.0.0.1, accounts.google.com, api.anthropic.com, api.openai.com, autoconfig.thunderbird.net, bugs.webkit.org, bugzilla.mozilla.org, calendar.google.com, cdn.jsdelivr.net, cdnjs.cloudflare.com, contacts.google.com, cure53.de, developer.mozilla.org, developers.google.com, docs.microsoft.com, drafts.csswg.org, en.cppreference.com, feross.org, github.com, gmail.googleapis.com, graph.microsoft.com, html.spec.whatwg.org, lea.verou.me, mail.google.com, oauth2.googleapis.com, openjdk.java.net, opensource.org, people.googleapis.com, quilljs.com, rmf39.aaz.lt, tasks.google.com, tasks.googleapis.com, tiptap.dev, translate.google.com, websemantics.uk, www.cse.yorku.ca, www.googleapis.com, www.tiny.cloud, www.w3.org

Source & flagged code

15 flagged

package.jsonView file

Lines 13-53json

13 "workspaces": [

14 "packages/mailx-types",

15 "packages/mailx-bus",

16 "packages/mailx-host",

17 "packages/mailx-send",

18 "packages/mailx-compose",

19 "packages/mailx-settings",

20 "packages/mailx-store",

21 "packages/mailx-store-web",

22 "packages/mailx-imap",

23 "packages/mailx-service",

24 "packages/mailx-api",

25 "client"

26 ],

27 "scripts": {

28 "build": "npm run build --workspaces --if-present && tsc -p bin && node bin/build-icon-ico.js && node bin/build-rmfmailto-exe.js && node bin/build-rmf-tiny.js && node bin/build-tinymce.js && node bin/build-quill.js && node bin/build-spellcheck-dict.js && node bin/build-bundles.mjs",

29 "watch": "tsc -w",

30 "release": "npmglobalize",

31 "test": "node --experimental-strip-types --test tests/*.test.ts tests/dom/*.test.ts",

32 "test:fast": "node --experimental-strip-types --test tests/dedup.test.ts tests/dedup-newest.test.ts tests/dupcount.test.ts tests/search.test.ts tests/sync-coalesce.test.ts tests/undelete.test.ts tests/body-load.test.ts tests/dom/_smoke.test.ts tests/dom/viewer-scroll.test.ts tests/dom/viewer-rerender-guard.test.ts",

33 "postinstall": "node bin/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 },

35 "dependencies": {

36 "@bobfrankston/iflow-direct": "^0.1.55",

37 "@bobfrankston/mailx-host": "^0.1.13",

38 "@bobfrankston/mailx-imap": "^0.1.110",

39 "@bobfrankston/mailx-store-web": "^0.1.33",

40 "@bobfrankston/mailx-sync": "^0.1.25",

41 "@bobfrankston/miscinfo": "^1.0.13",

42 "@bobfrankston/msger": "^0.1.387",

43 "@bobfrankston/node-tcp-transport": "^0.1.10",

44 "@bobfrankston/oauthsupport": "^1.0.33",

45 "@bobfrankston/rmf-tiny": "^0.1.35",

46 "@bobfrankston/smtp-direct": "^0.1.9",

47 "@bobfrankston/tcp-transport": "^0.1.7",

48 "@capacitor/android": "^8.3.0",

49 "@capacitor/cli": "^8.3.0",

50 "@capacitor/core": "^8.3.0",

51 "dictionary-en": "^4.0.0",

52 "express": "^4.21.0",

53 "html-to-docx": "^1.8.0",

cleanup-sent-tmp.mjsView file

Lines 1-23javascript

1import { createAutoImapConfig, CompatImapClient } from "@bobfrankston/iflow-direct";

2import { NodeTcpTransport } from "@bobfrankston/node-tcp-transport";

3const config = createAutoImapConfig({ server: "imap.iecc.com", port: 993, username: "bobf2", password: "v1s1calc" });

Medium

Secret Pattern

Package contains a possible secret pattern.

cleanup-sent-tmp.mjsView on unpkg · L3

bin/mailx.jsView file

Lines 34-74javascript

34 * configured accounts. Falls back to the first

35 * "override" account (non-known-provider domain).

36 * rmfmail -send <file> -account <id>

37 * Same, but force the account (skips auto

client/lib/quill/quill.jsView file

Lines 1-3javascript

1/*! For license information please see quill.js.LICENSE.txt */

2!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports

bin/lean-accounts.jsView file

Lines 116-156javascript

116 const inputPath = args.find(a => !a.startsWith("--"));

117 const inplace = args.includes("--inplace");

118 if (!inputPath) {

bin/build-bundles.mjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2/**

3 * Bundle client entry points so cold-start drops from ~43 s to ~2 s.

4 *

5 * mailx's msger custom protocol routes every fetch through one IPC channel

6 * (Rust → daemon stdin → response → stdout), so an ES module import cascade

7 * pays a multi-second roundtrip per file. With ~17 client-side modules each

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/build-bundles.mjsView on unpkg · L5

8 * pulling in transitive deps, the WebView is paying that cost N times in

9 * series.

bin/rmfmailto.exeView file

•path = bin/rmfmailto.exe kind = native_binary sizeBytes = 310272 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/rmfmailto.exeView on unpkg

packages/mailx-service/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @bobfrankston/rmfmail@1.2.87 matchedIdentity = npm:QGJvYmZyYW5rc3Rvbi9ybWZtYWls:1.2.87 similarity = 0.892 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

packages/mailx-service/index.jsView on unpkg

chk-search-tmp.mjsView file

3patternName = generic_password severity = medium line = 3 matchedText = const co... });

Medium

Secret Pattern

Hardcoded password in chk-search-tmp.mjs

chk-search-tmp.mjsView on unpkg · L3

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

cleanup-sent-tmp.mjsView file

3patternName = generic_password severity = medium line = 3 matchedText = const co... });

Medium

Secret Pattern

Package contains a possible secret pattern.

cleanup-sent-tmp.mjsView on unpkg · L3

bin/mailx.jsView file

54import net from "node:net"; L55: import { execSync } from "node:child_process"; L56: import { ports } from "@bobfrankston/miscinfo";

High

Child Process

Package source references child process execution.

bin/mailx.jsView on unpkg · L54

218// reg.exe value for `\"path\" \"%1\"` — double-backslash escapes for L219: // cmd.exe's shell layer, which strips one level before the value reaches L220: // reg.exe. Quoting %1 keeps `?` and `&` from being eaten by cmd before

High

Shell

Package source references shell execution.

bin/mailx.jsView on unpkg · L218

53Cross-file remote execution chain: bin/mailx.js spawns bin/popout-server.js; helper contains network access plus dynamic code execution. L53: import os from "node:os"; L54: import net from "node:net"; L55: import { execSync } from "node:child_process"; L56: import { ports } from "@bobfrankston/miscinfo"; ... L182: const unregister = hasFlag("unregister-mailto"); L183: if (process.platform !== "win32") { L184: console.error("--register-mailto / --unregister-mailto are Windows-only."); ... L196: // (shipped in the npm package) to the per-app location below. L197: const __perAppBin = path.join(process.env.LOCALAPPDATA || "", "rmfmail", "bin"); L198: const __rmfmailtoExe = path.join(__perAppBin, "rmfmailto.exe"); ... L218: // reg.exe value for `\"path\" \"%1\"` — double-backslash escapes for L219: // cmd.exe's shell layer, which strips one level before the value reaches

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/mailx.jsView on unpkg · L53

2175clearInstanceFile(); L2176: const { spawn: spawnChild } = await import("child_process"); L2177: const child = spawnChild("rmfmail", [], { detached: true, stdio: "ignore", shell: true, windowsHide: true }); ... L2190: } L2191: // Auto-update action: run npm install then restart L2192: if (req._action === "performUpdate") {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/mailx.jsView on unpkg · L2175

53import os from "node:os"; L54: import net from "node:net"; L55: import { execSync } from "node:child_process"; L56: import { ports } from "@bobfrankston/miscinfo"; ... L182: const unregister = hasFlag("unregister-mailto"); L183: if (process.platform !== "win32") { L184: console.error("--register-mailto / --unregister-mailto are Windows-only."); ... L196: // (shipped in the npm package) to the per-app location below. L197: const __perAppBin = path.join(process.env.LOCALAPPDATA || "", "rmfmail", "bin"); L198: const __rmfmailtoExe = path.join(__perAppBin, "rmfmailto.exe"); ... L218: // reg.exe value for `\"path\" \"%1\"` — double-backslash escapes for L219: // cmd.exe's shell layer, which strips one level before the value reaches

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/mailx.jsView on unpkg · L53

client/lib/quill/quill.jsView file

1/*! For license information please see quill.js.LICENSE.txt */ L2: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Quill=e():t.... L3: //# sourceMappingURL=quill.js.map

Low

Eval

Package source references a known benign dynamic code generation pattern.

client/lib/quill/quill.jsView on unpkg · L1

bin/lean-accounts.jsView file

137package = @bobfrankston/rmfmail; repositoryIdentity = mailx; dependency = jsonc-parser L137: const mod = await import(pathToFileURL(path.join(dir, "lib", "esm", "main.js")).href).catch(() => null) || L138: await import("jsonc-parser").catch(() => null); L139: if (mod) { parseJsonc = mod.parse; break; }

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/lean-accounts.jsView on unpkg · L137

136if (fs.existsSync(path.join(dir, "package.json"))) { L137: const mod = await import(pathToFileURL(path.join(dir, "lib", "esm", "main.js")).href).catch(() => null) || L138: await import("jsonc-parser").catch(() => null);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/lean-accounts.jsView on unpkg · L136

bin/build-bundles.mjsView file

5* mailx's msger custom protocol routes every fetch through one IPC channel L6: * (Rust → daemon stdin → response → stdout), so an ES module import cascade L7: * pays a multi-second roundtrip per file. With ~17 client-side modules each ... L148: logLevel: "info", L149: // .wasm files are inlined as base64 data URLs so the runtime can L150: // decode → Uint8Array → pass as initSqlJs({ wasmBinary }), bypassing L151: // sql.js's fetch(...) of the .wasm. Android WebView refuses to L152: // compile WASM fetched from file:// (even with AllowFileAccess /

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/build-bundles.mjsView on unpkg · L5

bin/rmfmailto.exeView file

•path = bin/rmfmailto.exe kind = native_binary sizeBytes = 310272 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/rmfmailto.exeView on unpkg

packages/mailx-service/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

packages/mailx-service/index.jsView on unpkg

chk-search-tmp.mjsView file

3patternName = generic_password severity = medium line = 3 matchedText = const co... });

Medium

Secret Pattern

Hardcoded password in chk-search-tmp.mjs

chk-search-tmp.mjsView on unpkg · L3

Findings

1 Critical6 High10 Medium8 Low

CriticalPrevious Version Dangerous Deltapackages/mailx-service/index.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/mailx.js

HighShellbin/mailx.js

HighCopied Package Dependency Bridgebin/lean-accounts.js

HighCross File Remote Execution Contextbin/mailx.js

HighRuntime Package Installbin/mailx.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumSecret Patterncleanup-sent-tmp.mjs

MediumDynamic Requirebin/lean-accounts.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebin/mailx.js

MediumProtestware

MediumShips Native Binarybin/rmfmailto.exe

MediumStructural Risk Force Deep Review

MediumSecret Patternchk-search-tmp.mjs

LowScripts Present

LowEvalclient/lib/quill/quill.js

LowWeak Cryptobin/build-bundles.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

15 flagged

package.jsonView file

Lines 13-53json

13 "workspaces": [

14 "packages/mailx-types",

15 "packages/mailx-bus",

16 "packages/mailx-host",

17 "packages/mailx-send",

18 "packages/mailx-compose",

19 "packages/mailx-settings",

20 "packages/mailx-store",

21 "packages/mailx-store-web",

22 "packages/mailx-imap",

23 "packages/mailx-service",

24 "packages/mailx-api",

25 "client"

26 ],

27 "scripts": {

29 "watch": "tsc -w",

30 "release": "npmglobalize",

31 "test": "node --experimental-strip-types --test tests/*.test.ts tests/dom/*.test.ts",

33 "postinstall": "node bin/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 },

35 "dependencies": {

36 "@bobfrankston/iflow-direct": "^0.1.55",

37 "@bobfrankston/mailx-host": "^0.1.13",

38 "@bobfrankston/mailx-imap": "^0.1.110",

39 "@bobfrankston/mailx-store-web": "^0.1.33",

40 "@bobfrankston/mailx-sync": "^0.1.25",

41 "@bobfrankston/miscinfo": "^1.0.13",

42 "@bobfrankston/msger": "^0.1.387",

43 "@bobfrankston/node-tcp-transport": "^0.1.10",

44 "@bobfrankston/oauthsupport": "^1.0.33",

45 "@bobfrankston/rmf-tiny": "^0.1.35",

46 "@bobfrankston/smtp-direct": "^0.1.9",

47 "@bobfrankston/tcp-transport": "^0.1.7",

48 "@capacitor/android": "^8.3.0",

49 "@capacitor/cli": "^8.3.0",

50 "@capacitor/core": "^8.3.0",

51 "dictionary-en": "^4.0.0",

52 "express": "^4.21.0",

53 "html-to-docx": "^1.8.0",

cleanup-sent-tmp.mjsView file

Lines 1-23javascript

1import { createAutoImapConfig, CompatImapClient } from "@bobfrankston/iflow-direct";

2import { NodeTcpTransport } from "@bobfrankston/node-tcp-transport";

3const config = createAutoImapConfig({ server: "imap.iecc.com", port: 993, username: "bobf2", password: "v1s1calc" });

Medium

Secret Pattern

Package contains a possible secret pattern.

cleanup-sent-tmp.mjsView on unpkg · L3

bin/mailx.jsView file

Lines 34-74javascript

34 * configured accounts. Falls back to the first

35 * "override" account (non-known-provider domain).

36 * rmfmail -send <file> -account <id>

37 * Same, but force the account (skips auto

client/lib/quill/quill.jsView file

Lines 1-3javascript

1/*! For license information please see quill.js.LICENSE.txt */

2!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports

bin/lean-accounts.jsView file

Lines 116-156javascript

116 const inputPath = args.find(a => !a.startsWith("--"));

117 const inplace = args.includes("--inplace");

118 if (!inputPath) {

bin/build-bundles.mjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2/**

3 * Bundle client entry points so cold-start drops from ~43 s to ~2 s.

4 *

5 * mailx's msger custom protocol routes every fetch through one IPC channel

6 * (Rust → daemon stdin → response → stdout), so an ES module import cascade

7 * pays a multi-second roundtrip per file. With ~17 client-side modules each

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/build-bundles.mjsView on unpkg · L5

8 * pulling in transitive deps, the WebView is paying that cost N times in

9 * series.

bin/rmfmailto.exeView file

•path = bin/rmfmailto.exe kind = native_binary sizeBytes = 310272 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/rmfmailto.exeView on unpkg

packages/mailx-service/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

packages/mailx-service/index.jsView on unpkg

chk-search-tmp.mjsView file

3patternName = generic_password severity = medium line = 3 matchedText = const co... });

Medium

Secret Pattern

Hardcoded password in chk-search-tmp.mjs

chk-search-tmp.mjsView on unpkg · L3