@oxiaom/adoremix@1.0.65
AdoreMix broadcast server - cross-platform installer, runner and service manager
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe source confirms a real data-loss risk in the explicitly invoked Audio8 installer, so a warning is appropriate. The package postinstall only prints guidance and does not trigger that installer automatically.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user runs `adoremix audio8 install` on Linux.
Impact
Other existing files in that directory may be permanently lost.
Mechanism
The installer moves only its model and voice directories aside, then recursively removes `~/audio8` before extracting Audio8 source.
AI rationale
The source confirms a real data-loss risk in the explicitly invoked Audio8 installer, so a warning is appropriate. The package postinstall only prints guidance and does not trigger that installer automatically.
Evidence
src/cli.jstts/providers/audio8.js
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The destructive routine is reached through the explicit `audio8 install` CLI command.
- The installer preserves `model` and `voices` temporarily, then deletes all of `~/audio8` before extracting bundled source; other existing contents can be lost.
- The npm postinstall runs a hint that tells users to run setup commands separately.
Evidence against
- The `~/audio8` deletion is gated behind the explicit install command, not the package postinstall hook.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
23 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/postinstall-hint.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgtts/providers/edge.jsView file
11L12: const { execFileSync } = require('child_process');
L13: const fs = require('fs');
High
Child Process
Package source references child process execution.
tts/providers/edge.jsView on unpkg · L11tts/providers/audio8.jsView file
492try {
L493: execSync(`systemctl --now disable ${AUDIO8_SYSTEMD_NAME} 2>/dev/null; true`, { stdio: 'pipe', shell: '/bin/bash' });
L494: execSync(`systemctl stop ${AUDIO8_SYSTEMD_NAME} 2>/dev/null; true`, { stdio: 'pipe', shell: '/bin/bash' });
...
L507: opts = opts || {};
L508: const baseUrl = opts.url || process.env.ADOREMIX_AUDIO8_BASE_URL || `http://127.0.0.1:${AUDIO8_DEFAULT_PORT}`;
L509: try {
Findings
3 Critical15 High7 Medium6 Low
CriticalSame File Env Network Executiontts/providers/audio8.js
CriticalTrigger Reachable Dangerous Capabilitytts/providers/audio8.js
CriticalPrevious Version Dangerous Deltasrc/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processtts/providers/edge.js
HighShelltts/providers/audio8.js
HighTrigger Reachable Persistencetts/providers/audio8.js
HighRuntime Package Installsrc/mp3server.js
HighShips High Entropy Blobaudio8-assets/audio8-tts.tgz
HighKnown Malware Source Similaritysrc/install.js
HighKnown Malware Source Similaritysrc/config-manager.js
Affected versions and remediation
This report applies to @oxiaom/adoremix@1.0.65.
See all versions of @oxiaom/adoremix for other recorded verdicts.
- Review the evidence and your use of @oxiaom/adoremix@1.0.65 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.