@oxiaom/adoremix@1.0.54
AdoreMix broadcast server - cross-platform installer, runner and service manager
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe postinstall hook is inert, but the explicit persistent configuration-manager feature exposes and controls a foreign root-owned AI-agent configuration without authentication. This is a concrete critical capability risk, not evidence of automatic install-time malware.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user runs adoremix config-manager install; a network client then requests its API endpoints.
Impact
Network-reachable clients can obtain AI-provider keys and change or disrupt the OpenClaw agent service.
Mechanism
Unauthenticated network service reads and modifies root OpenClaw configuration.
AI rationale
The postinstall hook is inert, but the explicit persistent configuration-manager feature exposes and controls a foreign root-owned AI-agent configuration without authentication. This is a concrete critical capability risk, not evidence of automatic install-time malware.
Evidence
config-manager/app.pysrc/config-manager.js/root/.openclaw/openclaw.json/etc/systemd/system/config-manager.service
Network endpoints1
[::]:9877
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- The configuration manager hard-codes the root OpenClaw configuration path.
- Its unauthenticated models endpoint returns configured API keys.
- It writes OpenClaw model and plugin settings, and can restart the OpenClaw gateway.
- The configuration manager listens on all IPv6 interfaces and is made persistent by its explicit install command.
Evidence against
- The npm postinstall hook only prints usage guidance.
- The risky server is installed only through an explicit adoremix config-manager install command.
- No source path sends harvested credentials to a package-controlled remote host.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
22 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/postinstall-hint.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgtts/providers/edge.jsView file
11L12: const { execFileSync } = require('child_process');
L13: const fs = require('fs');
High
Child Process
Package source references child process execution.
tts/providers/edge.jsView on unpkg · L11Findings
3 Critical16 High6 Medium5 Low
CriticalSame File Env Network Executiontts/providers/audio8.js
CriticalTrigger Reachable Dangerous Capabilitytts/providers/audio8.js
CriticalPrevious Version Dangerous Deltatts/providers/audio8.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processtts/providers/edge.js
HighShelltts/providers/audio8.js
HighTrigger Reachable Persistencetts/providers/audio8.js
HighSemantic Analysis Limitedpackage.json
HighKnown Malware Source Similaritysrc/install.js
HighKnown Malware Source Similaritysrc/tts-deps.js
HighKnown Malware Source Similaritysrc/config-manager.js
Affected versions and remediation
This report applies to @oxiaom/adoremix@1.0.54.
See all versions of @oxiaom/adoremix for other recorded verdicts.
- Review the evidence and your use of @oxiaom/adoremix@1.0.54 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.