@myassis/gateway@1.0.51

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Running the gateway HTTP server, then calling /api/v1/service/* endpoints or using the LLM exec tool in an authenticated session.

Local service persistence, service stop/start/update, and possible arbitrary command execution through intended AI tool workflows.

Unauthenticated service-control/update routes plus user-invoked command execution tool

When run as a gateway server, the package mounts /api/v1/service routes without authentication. Those routes call ServiceManager methods that create autostart persistence, systemd units, and update scripts, and can download replacement executables. This creates a practical local/LAN compromise surface, but source inspection did not show install-time execution, credential theft, covert exfiltration, or a hidden payload, so the evidence supports warning for critical vulnerability rather than blocking as malicious malware.

The dangerous behavior is largely package-aligned for a local AI gateway/service manager and is not triggered at install/import time, but unauthenticated service-management routes make the published package unsafe to mark clean. Treat as a warning-level critical vulnerability, not confirmed malicious intent.