@oxiaom/adoremix@1.0.58
AdoreMix broadcast server - cross-platform installer, runner and service manager
AI Security Review
scanned 8d ago · by lpm-firewall-aiSource inspection confirms an unauthenticated network management API that can disclose provider keys and modify OpenClaw model settings. The service requires an explicit CLI install command, so this is a warning rather than a package-install attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
An operator runs `adoremix config-manager install`, which starts the service and enables it at boot.
Impact
An unauthenticated network client may read provider credentials or alter OpenClaw model settings. No evidence shows this service is enabled automatically during package installation.
Mechanism
The service binds to all IPv6 interfaces. Its model API returns stored API keys and accepts changes to model settings without an authentication check.
AI rationale
Source inspection confirms an unauthenticated network management API that can disclose provider keys and modify OpenClaw model settings. The service requires an explicit CLI install command, so this is a warning rather than a package-install attack.
Evidence
src/cli.jssrc/config-manager.jsconfig-manager/app.pypackage.jsonbin/postinstall-hint.js
Network endpoints1
[::]:9877
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The config manager is activated by the explicit `adoremix config-manager install` command, which installs and starts a system service.
- The service listens on all IPv6 interfaces at port 9877.
- Its `/api/models` route returns stored provider API keys without an authentication check.
- Its `/api/models` POST route accepts changes to OpenClaw model settings, including API keys and provider base URLs.
- The postinstall hook only prints setup instructions.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
24 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/postinstall-hint.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgtts/providers/edge.jsView file
11L12: const { execFileSync } = require('child_process');
L13: const fs = require('fs');
High
Child Process
Package source references child process execution.
tts/providers/edge.jsView on unpkg · L11tts/providers/audio8.jsView file
403} catch (e) {}
L404: execSync('sleep 2', { stdio: 'pipe', shell: '/bin/bash' });
L405: }
...
L413: const cfg = require(path.join(__dirname, '..', 'src', 'config'));
L414: const wd = opts.workdir || process.env.ADOREMIX_WORKDIR || path.join(os.homedir(), '.local', 'share', 'adoremix');
L415: cfg.setConfigValue(wd, 'TTS.provider', 'audio8');
L416: cfg.setConfigValue(wd, 'TTS.audio8_base_url', `http://127.0.0.1:${AUDIO8_DEFAULT_PORT}`);
L417: logger.ok(`config.ini 已更新: provider=audio8, audio8_base_url=http://127.0.0.1:${AUDIO8_DEFAULT_PORT}`);
Findings
3 Critical16 High7 Medium6 Low
CriticalSame File Env Network Executiontts/providers/audio8.js
CriticalTrigger Reachable Dangerous Capabilitytts/providers/audio8.js
CriticalPrevious Version Dangerous Deltatts/providers/audio8.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processtts/providers/edge.js
HighShelltts/providers/audio8.js
HighTrigger Reachable Persistencetts/providers/audio8.js
HighShips High Entropy Blobaudio8-assets/audio8-tts.tgz
HighKnown Malware Source Similaritysrc/install.js
HighKnown Malware Source Similaritysrc/tts-deps.js
HighKnown Malware Source Similaritysrc/config-manager.js
Affected versions and remediation
This report applies to @oxiaom/adoremix@1.0.58.
See all versions of @oxiaom/adoremix for other recorded verdicts.
- Review the evidence and your use of @oxiaom/adoremix@1.0.58 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.