registry / Credential exfiltration / @crossberryweb/nx

@crossberryweb/nx

nx - Noxs command line, portable edition: plugin registry, sha256-verified downloads, file-cloud login (nx plugin login/auth), plugin scaffolding (nx plugin init/push), pkg info, URL opening. Windows, macOS, Linux.

This report shows the evidence for @crossberryweb/nx@1.1.0. 1 of 2 known versions is blocked or flagged. See all versions.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

The published CLI routes `nx plugin login` to code that sends the supplied username and password to a package-selected ngrok endpoint by default. This is concrete credential disclosure to a recipient the user has not specifically selected, so publication should be blocked.

Static reason

One or more suspicious static signals were detected.

Trigger

A user invokes `nx plugin login` without selecting a different host.

Impact

The default recipient receives the login credentials and may receive a session cookie in response.

Mechanism

The login handler uses the stored host or the package default, then posts the supplied credentials to that host's login endpoint.

Attack narrative

Invoking the CLI login command without a host override sends the entered file-cloud credentials to the package's default ngrok host. The source permits other HTTPS hosts but does not require the user to affirm the default recipient.

AI rationale

Evidence

package.jsonbin/nx.jslib/plugin.js~/.noxs/curl-tube/host.txt~/.noxs/curl-tube/session.jar

Network endpoints1

precision-pledge-fled.ngrok-free.app

Decision evidence

public snapshot

AI called this Malicious at 97.0% confidence as Malware with low false-positive risk.

Evidence for block

The package exposes bin/nx.js as its CLI, and `nx plugin login` dispatches to the login handler.
Login defaults to a package-selected ngrok host; host validation accepts any HTTPS host rather than restricting it to the intended service.
The login handler accepts a username and password and posts both to the selected host's login endpoint.
The login command runs when explicitly invoked, but its default recipient is selected by the package and the source shows no recipient-specific consent guard.

Evidence against

The caller can override the host with `--host`, but that does not change the package-selected default recipient.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 31.7 KB of source, external domains: github.com, precision-pledge-fled.ngrok-free.app, raw.githubusercontent.com, www.npmjs.com, www.w3.org

Source & flagged code

6 flagged

bin/nx.jsView file

Lines 1-44javascript

1#!/usr/bin/env node

2/**

3 * nx — Noxs command line, portable edition.

4 * npm package: @crossberryweb/nx

5 *

6 * Mirrors the Noxs terminal `nx` dispatcher (linux-runtime/nx) for every

7 * platform that runs Node.js: Windows (cmd/PowerShell), macOS, Linux.

8 * Zero runtime dependencies — Node built-ins only.

9 *

10 * Commands:

11 * nx plugins list the Noxs plugin registry

12 * nx info <plugin-id> show one plugin's metadata + checksum

13 * nx install <id> [dir] download + sha256-verify a .noxs-plugin

14 * nx pkg info <spec> inspect a noxs-pkg style package registry

15 * nx ow <url> open a URL (Noxs browser on device; default

16 * browser elsewhere)

17 * nx version | help

18 */

19'use strict';

21const https = require('https');

22const crypto = require('crypto');

23const fs = require('fs');

24const path = require('path');

25const { spawn } = require('child_process');

High

Child Process

Package source references child process execution.

bin/nx.jsView on unpkg · L24

27const VERSION = '1.1.0';

28const pluginCmds = require('../lib/plugin');

29const PLUGIN_OWNER = process.env.NX_PLUGINS_OWNER || 'crossberry-in';

30const PLUGIN_REPO = process.env.NX_PLUGINS_REPO || 'nx-pkg';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/nx.jsView on unpkg · L20

31const PKG_OFFICIAL_ORG = process.env.NX_OFFICIAL_ORG || 'noxs-pkg';

32const RAW_BASE = 'https://raw.githubusercontent.com';

33const UA = 'nx-cli/' + VERSION + ' (noxs portable; +https://github.com/' + PLUGIN_OWNER + '/' + PLUGIN_REPO + ')';

35const RE_NAME = /^[a-z0-9][a-z0-9._-]*$/;

36const RE_REPO = /^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/;

37const RE_SHA = /^[0-9a-fA-F]{64}$/;

39function msg(s) { process.stdout.write('nx: ' + s + '\n'); }

40function err(s) { process.stderr.write('nx: ' + s + '\n'); }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/nx.jsView on unpkg · L24

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

bin/nx.jsView on unpkg · L24

41function die(s) { err(s); process.exit(1); }

42function stage(s) { process.stdout.write('\x1b[1;36mnx:\x1b[0m ' + s + '\n'); }

44function usage(code) {

lib/plugin.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/plugin.js#virtual:normalized:round1View on unpkg

package.jsonView file

Lines 1-25json

2 "name": "@crossberryweb/nx",

3 "version": "1.1.0",

4 "description": "nx - Noxs command line, portable edition: plugin registry, sha256-verified downloads, file-cloud login (nx plugin login/auth), plugin scaffolding (nx plugin init/push), pkg info, URL opening. Windows, macOS, Linux.",

5 "bin": {

Source & flagged code

6 flagged · loading source

bin/nx.jsView file

24const path = require('path'); L25: const { spawn } = require('child_process'); L26:

High

Child Process

Package source references child process execution.

bin/nx.jsView on unpkg · L24

20L21: const https = require('https'); L22: const crypto = require('crypto'); ... L24: const path = require('path'); L25: const { spawn } = require('child_process'); L26: ... L28: const pluginCmds = require('../lib/plugin'); L29: const PLUGIN_OWNER = process.env.NX_PLUGINS_OWNER || 'crossberry-in'; L30: const PLUGIN_REPO = process.env.NX_PLUGINS_REPO || 'nx-pkg';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/nx.jsView on unpkg · L20

24const path = require('path'); L25: const { spawn } = require('child_process'); L26: ... L31: const PKG_OFFICIAL_ORG = process.env.NX_OFFICIAL_ORG || 'noxs-pkg'; L32: const RAW_BASE = 'https://raw.githubusercontent.com'; L33: const UA = 'nx-cli/' + VERSION + ' (noxs portable; +https://github.com/' + PLUGIN_OWNER + '/' + PLUGIN_REPO + ')'; ... L38: L39: function msg(s) { process.stdout.write('nx: ' + s + '\n'); } L40: function err(s) { process.stderr.write('nx: ' + s + '\n'); }

High

Findings

7 High2 Medium3 Low

HighChild Processbin/nx.js

HighShell

HighSame File Env Network Executionbin/nx.js

HighCommand Output Exfiltrationbin/nx.js

HighTrigger Reachable Command Output Exfiltrationbin/nx.js

HighSemantic Analysis Limitedlib/plugin.js#virtual:normalized:round1

HighAi Review Evidencepackage.json

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @crossberryweb/nx@1.1.0.

The versions list below shows the verdict for each recorded version.

Avoid installing @crossberryweb/nx@1.1.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-13 11:44:30.828Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.1.0latestshownMaliciousCredential ExfiltrationBlockPublishedOct 12, 2026, 2:17 PM 1.0.1SuspiciousRemote Code ExecutionWarnPublishedOct 12, 2026, 8:27 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other credential exfiltration packages

Behavioral surface

Related packages

Other credential exfiltration packages

Source & flagged code