registry / @oxiaom/adoremix / 1.0.59
@oxiaom/adoremix@1.0.59
⚠ Under reviewAdoreMix broadcast server - cross-platform installer, runner and service manager
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe npm lifecycle hook only prints setup guidance, and the service installation requires a separate CLI command. Manual review is needed because the bundled archive exceeds the citation verifier’s size limit, preventing complete verified source coverage.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Running `adoremix audio8 install`.
Impact
The bundled service runs persistently; its full source could not be citation-verified, leaving unresolved risk.
Mechanism
The command extracts the archive under `~/audio8`, installs its dependencies, and enables an Audio8 systemd service.
AI rationale
The npm lifecycle hook only prints setup guidance, and the service installation requires a separate CLI command. Manual review is needed because the bundled archive exceeds the citation verifier’s size limit, preventing complete verified source coverage.
Evidence
audio8-assets/audio8-tts.tgztts/providers/audio8.jssrc/cli.js~/audio8/etc/systemd/system/audio8-tts.service
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The npm postinstall runs a hint script that prints setup instructions; it does not invoke the Audio8 installer.
- The Audio8 installer is a separate CLI command that calls the provider’s install function.
- That installer extracts the bundled archive and enables an Audio8 systemd service.
- The archive exceeds the citation verifier’s 16 MiB limit, so its full source cannot be covered by verified citations.
Evidence against
- The inspected MiniMax provider sends its configured token to the fixed MiniMax API endpoint.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
24 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/postinstall-hint.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgtts/providers/edge.jsView file
11L12: const { execFileSync } = require('child_process');
L13: const fs = require('fs');
High
Child Process
Package source references child process execution.
tts/providers/edge.jsView on unpkg · L11tts/providers/audio8.jsView file
442} catch (e) {}
L443: execSync('sleep 2', { stdio: 'pipe', shell: '/bin/bash' });
L444: }
...
L452: const cfg = require(path.join(__dirname, '..', 'src', 'config'));
L453: const wd = opts.workdir || process.env.ADOREMIX_WORKDIR || path.join(os.homedir(), '.local', 'share', 'adoremix');
L454: cfg.setConfigValue(wd, 'TTS.provider', 'audio8');
L455: cfg.setConfigValue(wd, 'TTS.audio8_base_url', `http://127.0.0.1:${AUDIO8_DEFAULT_PORT}`);
L456: logger.ok(`config.ini 已更新: provider=audio8, audio8_base_url=http://127.0.0.1:${AUDIO8_DEFAULT_PORT}`);
Findings
3 Critical16 High7 Medium6 Low
CriticalSame File Env Network Executiontts/providers/audio8.js
CriticalTrigger Reachable Dangerous Capabilitytts/providers/audio8.js
CriticalPrevious Version Dangerous Deltatts/providers/audio8.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processtts/providers/edge.js
HighShelltts/providers/audio8.js
HighTrigger Reachable Persistencetts/providers/audio8.js
HighShips High Entropy Blobaudio8-assets/audio8-tts.tgz
HighKnown Malware Source Similaritysrc/install.js
HighKnown Malware Source Similaritysrc/tts-deps.js
HighKnown Malware Source Similaritysrc/config-manager.js
Affected versions and remediation
This report applies to @oxiaom/adoremix@1.0.59.
See all versions of @oxiaom/adoremix for other recorded verdicts.
- Review the evidence and your use of @oxiaom/adoremix@1.0.59 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.