registry / @foxden-app/foxclaw / 0.5.72

@foxden-app/foxclaw@0.5.72

Foxden local execution claw for controlling Codex from trusted chat interfaces.

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 68 file(s), 1.13 MB of source, external domains: 127.0.0.1, api.openai.com, api.telegram.org, github.com, ilink.weixin.qq.com, ilinkai.weixin.qq.com, novac2c.cdn.weixin.qq.com, www.apple.com

Source & flagged code

5 flagged

dist/channels/weixin/ilink/upload.jsView file

Lines 43-76javascript

43 ...(uploadFullUrl ? { uploadFullUrl } : {}),

44 ...(uploadParam ? { uploadParam } : {}),

45 });

46 return {

47 filekey,

48 downloadEncryptedQueryParam: downloadParam,

49 aeskey: aeskey.toString('hex'),

50 fileSize: rawsize,

51 fileSizeCiphertext: filesize,

52 };

53}

54export async function uploadFileToWeixin(params) {

55 return uploadMediaToCdn({

56 ...params,

57 mediaType: UploadMediaType.IMAGE,

58 label: 'uploadFileToWeixin',

59 });

60}

61export async function downloadRemoteImageToTemp(url, destDir) {

62 const log = getIlinkRuntimeContext().logger;

63 log.debug(`downloadRemoteImageToTemp: fetching url=${url}`);

64 const res = await fetch(url);

65 if (!res.ok) {

66 throw new Error(`remote media download failed: ${res.status} url=${url}`);

67 }

68 const buf = Buffer.from(await res.arrayBuffer());

69 await fs.mkdir(destDir, { recursive: true });

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/channels/weixin/ilink/upload.jsView on unpkg · L63

70 const ext = getExtensionFromContentTypeOrUrl(res.headers.get('content-type'), url);

71 const name = tempFileName('weixin-remote', ext);

72 const filePath = path.join(destDir, name);

73 await fs.writeFile(filePath, buf);

74 return filePath;

75}

dist/main.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2import crypto from 'node:crypto';

3import fs from 'node:fs';

4import os from 'node:os';

5import path from 'node:path';

6import process from 'node:process';

scripts/systemd/uninstall.shView file

•path = scripts/systemd/uninstall.sh kind = build_helper sizeBytes = 134 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/systemd/uninstall.shView on unpkg

dist/update.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @foxden-app/foxclaw@0.5.71 matchedIdentity = npm:QGZveGRlbi1hcHAvZm94Y2xhdw:0.5.71 similarity = 0.985 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/update.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/channels/weixin/ilink/upload.jsView file

63log.debug(`downloadRemoteImageToTemp: fetching url=${url}`); L64: const res = await fetch(url); L65: if (!res.ok) { ... L67: } L68: const buf = Buffer.from(await res.arrayBuffer()); L69: await fs.mkdir(destDir, { recursive: true });

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/channels/weixin/ilink/upload.jsView on unpkg · L63

dist/main.jsView file

7import { createInterface } from 'node:readline/promises'; L8: import { spawnSync } from 'node:child_process'; L9: import { fileURLToPath } from 'node:url'; ... L186: clusterBroadcastFile: CLUSTER_UPDATE_BROADCAST_PATH, L187: ...(process.env.CODEX_CLI_BIN || resolveCommand('codex') L188: ? { codexCliBin: process.env.CODEX_CLI_BIN || resolveCommand('codex') } ... L263: try { L264: const pkg = JSON.parse(fs.readFileSync(path.join(packageRoot, 'package.json'), 'utf8')); L265: return typeof pkg.version === 'string' && pkg.version.trim() ? pkg.version : '0.0.0'; ... L292: console.error('Usage: foxclaw send-voice <path> [caption] [--bot-id <bot-id>] [--chat-id <chat-id>]'); L293: process.exitCode = 1; L294: return;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/main.jsView on unpkg · L7

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/main.jsView on unpkg · L7

scripts/systemd/uninstall.shView file

•path = scripts/systemd/uninstall.sh kind = build_helper sizeBytes = 134 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/systemd/uninstall.shView on unpkg

dist/update.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/update.jsView on unpkg

Findings

2 High5 Medium6 Low

HighSandbox Evasion Gated Capabilitydist/main.js

HighPrevious Version Dangerous Deltadist/update.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/main.js

MediumShips Build Helperscripts/systemd/uninstall.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/channels/weixin/ilink/upload.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

5 flagged

dist/channels/weixin/ilink/upload.jsView file

Lines 43-76javascript

43 ...(uploadFullUrl ? { uploadFullUrl } : {}),

44 ...(uploadParam ? { uploadParam } : {}),

45 });

46 return {

47 filekey,

48 downloadEncryptedQueryParam: downloadParam,

49 aeskey: aeskey.toString('hex'),

50 fileSize: rawsize,

51 fileSizeCiphertext: filesize,

52 };

53}

54export async function uploadFileToWeixin(params) {

55 return uploadMediaToCdn({

56 ...params,

57 mediaType: UploadMediaType.IMAGE,

58 label: 'uploadFileToWeixin',

59 });

60}

61export async function downloadRemoteImageToTemp(url, destDir) {

62 const log = getIlinkRuntimeContext().logger;

63 log.debug(`downloadRemoteImageToTemp: fetching url=${url}`);

64 const res = await fetch(url);

65 if (!res.ok) {

66 throw new Error(`remote media download failed: ${res.status} url=${url}`);

67 }

68 const buf = Buffer.from(await res.arrayBuffer());

69 await fs.mkdir(destDir, { recursive: true });

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/channels/weixin/ilink/upload.jsView on unpkg · L63

70 const ext = getExtensionFromContentTypeOrUrl(res.headers.get('content-type'), url);

71 const name = tempFileName('weixin-remote', ext);

72 const filePath = path.join(destDir, name);

73 await fs.writeFile(filePath, buf);

74 return filePath;

75}

dist/main.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2import crypto from 'node:crypto';

3import fs from 'node:fs';

4import os from 'node:os';

5import path from 'node:path';

6import process from 'node:process';

scripts/systemd/uninstall.shView file

•path = scripts/systemd/uninstall.sh kind = build_helper sizeBytes = 134 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/systemd/uninstall.shView on unpkg

dist/update.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/update.jsView on unpkg