@okx_ai/okx-trade-cli@1.4.8
OKX CLI - Command line tool for OKX exchange
AI Security Review
scanned 29d ago · by lpm-firewall-aiThe install hook downloads unsigned native binaries from a CDN list led by static.jingyunyilian.com and trusts a checksum from that same host, then the CLI can execute the pilot binary. That is a real install-time code-execution risk, while the rest of the package behaves as an OKX trading CLI without a hidden credential or agent-hijack chain.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
npm install runs the postinstall script node scripts/postinstall.js.
Impact
A substituted response from the first CDN can place an attacker-controlled executable that the CLI will run on later use. No in-package secret theft or agent-config write runs during install.
Mechanism
downloadPilotBinary and downloadOkxAuthBinary GET checksum.json and the platform binary from static.jingyunyilian.com, then static.okx.com and static.coinall.ltd, write the file under the home .okx/bin directory, and chmod 755. dist/index.js calls execFile on the pilot path for a later OKX request.
AI rationale
The install hook downloads unsigned native binaries from a CDN list led by static.jingyunyilian.com and trusts a checksum from that same host, then the CLI can execute the pilot binary. That is a real install-time code-execution risk, while the rest of the package behaves as an OKX trading CLI without a hidden credential or agent-hijack chain.
Evidence
package.jsonscripts/postinstall.jsdist/index.js~/.okx/bin/okx-pilot~/.okx/bin/okx-auth
Network endpoints6
static.jingyunyilian.com/upgradeapp/tools/pilotstatic.okx.com/upgradeapp/tools/pilotstatic.coinall.ltd/upgradeapp/tools/pilotstatic.jingyunyilian.com/upgradeapp/tools/oauthstatic.okx.com/upgradeapp/tools/oauth/upgradeapp/tools/oauth
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- npm postinstall runs scripts/postinstall.js and ignores a non-zero exit.
- That script downloads okx-pilot and okx-auth over HTTPS, writes them under the home .okx/bin directory, and sets mode 755. The first host is static.jingyunyilian.com, followed by static.okx.com and static.coinall.ltd.
- The SHA-256 check uses checksum.json from the same host as the binary, so the package does not pin a local hash.
- dist/index.js later execFile's the downloaded okx-pilot binary when resolving a pilot node.
- The same CDN host list is compiled into dist/index.js.
Evidence against
- Download failures are caught and do not fail npm install, and postinstall does not spawn the binaries.
- Pilot execution is limited to a domain argument matching *.okx.com.
- Skill install and auth helper commands are explicit CLI actions, not install hooks.
- Runtime dependencies are undici and yauzl only, with no self-dependency lifecycle chain.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
12 flagged · loading sourcepackage.jsonView file
•scripts changed=test:unit
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
Findings
2 Critical8 High5 Medium4 Low
CriticalManifest Confusionpackage.json
CriticalPrevious Version Dangerous Deltadist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationscripts/postinstall.js
HighCredential Redirect Persistencedist/index.js
HighKnown Malware Source Similaritydist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Require
Affected versions and remediation
This report applies to @okx_ai/okx-trade-cli@1.4.8.
See all versions of @okx_ai/okx-trade-cli for other recorded verdicts.
- Review the evidence and your use of @okx_ai/okx-trade-cli@1.4.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.