registry / Install hook abuse / @okx_ai/okx-trade-cli
@okx_ai/okx-trade-cli
OKX CLI - Command line tool for OKX exchange
This report shows the evidence for @okx_ai/okx-trade-cli@1.4.7. 4 of 6 known versions are blocked or flagged. The newest version, 1.4.8, is flagged. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is an automatic lifecycle remote-code delivery chain, not a transparent package-only CLI installation. The downloaded payload is not independently pinned or reviewable, and the package executes it later.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
npm installation triggers postinstall; later CLI network and authentication actions invoke the dropped binaries.
Impact
A remote host that controls both the binary and its checksum can cause unreviewed native code to run under the installing user's account.
Mechanism
Install-time remote binary download followed by later local execution.
Attack narrative
During npm postinstall, the package downloads checksum metadata and platform executables from remote CDN hosts, replaces files in ~/.okx/bin, and marks them executable. The integrity check trusts metadata fetched from the same host as the executable. The shipped CLI subsequently runs okx-pilot and okx-auth, so a remote payload is introduced automatically at install time and executed later outside the reviewed package source.
AI rationale
This is an automatic lifecycle remote-code delivery chain, not a transparent package-only CLI installation. The downloaded payload is not independently pinned or reviewable, and the package executes it later.
Evidence
package.jsonscripts/postinstall.jsdist/index.js~/.okx/bin/okx-pilot~/.okx/bin/okx-auth
Network endpoints6
static.jingyunyilian.com/upgradeapp/tools/pilotstatic.okx.com/upgradeapp/tools/pilotstatic.coinall.ltd/upgradeapp/tools/pilotstatic.jingyunyilian.com/upgradeapp/tools/oauth/upgradeapp/tools/oauth
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package automatically runs a postinstall script.
- Postinstall fetches checksums and platform binaries from three remote hosts.
- The script places downloaded files in ~/.okx/bin and makes them executable.
- The CLI later executes the downloaded pilot and auth binaries.
- Checksum data comes from the same remote source as the binary, so it does not establish a pinned publisher identity.
- The bundled CLI installer places a remotely obtained Pilot binary under ~/.okx/bin.
Evidence against
- No local secret-harvesting or exfiltration code was confirmed in the inspected files.
- The remote binary contents are not present in this package snapshot.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts changed=test:unit
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
Findings
2 Critical8 High4 Medium4 Low
CriticalManifest Confusionpackage.json
CriticalPrevious Version Dangerous Deltadist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationscripts/postinstall.js
HighCredential Redirect Persistencedist/index.js
HighKnown Malware Source Similaritydist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
Affected versions and remediation
This report applies to @okx_ai/okx-trade-cli@1.4.7.
The versions list below shows the verdict for each recorded version.
- Avoid installing @okx_ai/okx-trade-cli@1.4.7. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.