registry / @foxden-app/foxclaw / 0.5.72

@foxden-app/foxclaw@0.5.72

Foxden local execution claw for controlling Codex from trusted chat interfaces.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 68 file(s), 1.13 MB of source, external domains: 127.0.0.1, api.openai.com, api.telegram.org, github.com, ilink.weixin.qq.com, ilinkai.weixin.qq.com, novac2c.cdn.weixin.qq.com, www.apple.com

Source & flagged code

5 flagged

dist/channels/weixin/ilink/upload.jsView file

Lines 43-76javascript

43 ...(uploadFullUrl ? { uploadFullUrl } : {}),

44 ...(uploadParam ? { uploadParam } : {}),

45 });

46 return {

47 filekey,

48 downloadEncryptedQueryParam: downloadParam,

Source & flagged code

5 flagged · loading source

dist/channels/weixin/ilink/upload.jsView file

63log.debug(`downloadRemoteImageToTemp: fetching url=${url}`); L64: const res = await fetch(url); L65: if (!res.ok) { ... L67: } L68: const buf = Buffer.from(await res.arrayBuffer()); L69: await fs.mkdir(destDir, { recursive: true });

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/channels/weixin/ilink/upload.jsView on unpkg · L63

dist/main.jsView file

7import { createInterface } from 'node:readline/promises'; L8: import { spawnSync } from 'node:child_process'; L9: import { fileURLToPath } from 'node:url'; ... L186: clusterBroadcastFile: CLUSTER_UPDATE_BROADCAST_PATH, L187: ...(process.env.CODEX_CLI_BIN || resolveCommand('codex') L188: ? { codexCliBin: process.env.CODEX_CLI_BIN || resolveCommand('codex') } ... L263: try { L264: const pkg = JSON.parse(fs.readFileSync(path.join(packageRoot, 'package.json'), 'utf8')); L265: return typeof pkg.version === 'string' && pkg.version.trim() ? pkg.version : '0.0.0'; ... L292: console.error('Usage: foxclaw send-voice <path> [caption] [--bot-id <bot-id>] [--chat-id <chat-id>]'); L293: process.exitCode = 1; L294: return;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/main.jsView on unpkg · L7

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/main.jsView on unpkg · L7

scripts/systemd/uninstall.shView file

•path = scripts/systemd/uninstall.sh kind = build_helper sizeBytes = 134 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/systemd/uninstall.shView on unpkg

dist/update.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @foxden-app/foxclaw@0.5.71 matchedIdentity = npm:QGZveGRlbi1hcHAvZm94Y2xhdw:0.5.71 similarity = 0.985 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/update.jsView on unpkg

Findings

2 High5 Medium6 Low

HighSandbox Evasion Gated Capabilitydist/main.js

HighPrevious Version Dangerous Deltadist/update.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/main.js

MediumShips Build Helperscripts/systemd/uninstall.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/channels/weixin/ilink/upload.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

dist/main.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2import crypto from 'node:crypto';

3import fs from 'node:fs';

4import os from 'node:os';

5import path from 'node:path';

6import process from 'node:process';

7import { createInterface } from 'node:readline/promises';

8import { spawnSync } from 'node:child_process';

9import { fileURLToPath } from 'node:url';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/main.jsView on unpkg · L7

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/main.jsView on unpkg · L7

10import { APP_HOME, buildCodexApiProviderOverrides, DEFAULT_CODEX_TELEGRAM_HOME, DEFAULT_ENV_PATH, DEFAULT_LOG_PATH, DEFAULT_STATUS_PATH, getLoadedEnvPath, loadConfig, loadEnv, } from './config.js';

11import { createAuthRefreshNotificationAggregator, } from './auth/notifications.js';

12import { installBundledCodexSkills } from './codex_skills.js';

13import { acquireProcessLock, LockHeldError } from './lock.js';

14import { readRuntimeStatus, writeRuntimeStatus } from './runtime.js';

15import { buildFoxclawLaunchdPlistText, extractNodePathFromLaunchdPlist, } from './launchd.js';

16import { buildFoxclawSystemdUnitText, buildSystemdRestartHelperArgs, cgroupContainsSystemdUnit, refreshFoxclawExecStartDropIns, removeFoxclawExecStartDropIns, } from './systemd.js';

17import { clearPendingClusterUpdateBroadcast, createSelfUpdateRuntime, inferPnpmHomeFromEntryPoint, performSelfUpdate, readPendingClusterUpdateBroadcast, readSelfUpdateStatus, writeSelfUpdateStatus, } from './update.js';

18import { TELEGRAM_VOICE_MAX_BYTES, TELEGRAM_VOICE_SUPPORTED_EXTENSIONS, telegramVoiceContentType, } from './voice/files.js';

19import { inferTelegramBotId, resolveTelegramVoiceTarget } from './voice/target.js';

20import { shouldShowRuntimeLastUpdate } from './update_status.js';

21const rawCommand = process.argv[2];

22const command = rawCommand || 'serve';

23loadEnv();

24const packageRoot = path.dirname(path.dirname(fileURLToPath(import.meta.url)));

25const entryPoint = fileURLToPath(import.meta.url);

26const PROXY_ENV_KEYS = [

27 'HTTP_PROXY',