registry / @oxiaom/adoremix / 1.0.66

@oxiaom/adoremix@1.0.66

⚠ Under review

AdoreMix broadcast server - cross-platform installer, runner and service manager

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The inspected postinstall hook only prints CLI guidance, and the reviewed runtime sources show expected installer, TTS and UI behavior. The bundled archive is unreadable through the inspection tool and exceeds the citation verification limit, so its contents cannot be resolved from this review.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

The unresolved item is a bundled archive referenced during the user-invoked Audio8 setup flow.

Impact

The archive’s contents and effects remain unknown; no malicious effect is confirmed.

Mechanism

The provider source locates the archive as an offline source bundle, but the archive content could not be inspected.

AI rationale

Evidence

audio8-assets/audio8-tts.tgz

Decision evidence

public snapshot

AI called this Manual Review at 68.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest’s postinstall hook only runs a hint script; the helper dependency install is part of the explicit `adoremix install` command.
Flagged UI assets contain Axios cancellation helpers and ordinary asset-loading fetch code; these excerpts do not show credential transfer or an attack.
The TTS sources use a local Audio8 endpoint or provider-specific TTS services, while configuration and service setup are exposed through CLI functions.
The Audio8 provider references a bundled tarball, but the archive itself could not be inspected: the read tool rejected its binary content and citation verification reported it exceeded 16 MiB.

Evidence against

The unreadable bundled archive prevents confirming its contents, so a clean verdict is not adequately supported.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

Source & flagged code

22 flagged

package.jsonView file

•scripts.postinstall = node ./bin/postinstall-hint.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

tts/providers/edge.jsView file

11L12: const { execFileSync } = require('child_process'); L13: const fs = require('fs');

High

Child Process

Package source references child process execution.

tts/providers/edge.jsView on unpkg · L11

tts/providers/audio8.jsView file

492try { L493: execSync(`systemctl --now disable ${AUDIO8_SYSTEMD_NAME} 2>/dev/null; true`, { stdio: 'pipe', shell: '/bin/bash' }); L494: execSync(`systemctl stop ${AUDIO8_SYSTEMD_NAME} 2>/dev/null; true`, { stdio: 'pipe', shell: '/bin/bash' }); ... L507: opts = opts || {}; L508: const baseUrl = opts.url || process.env.ADOREMIX_AUDIO8_BASE_URL || `http://127.0.0.1:${AUDIO8_DEFAULT_PORT}`; L509: try {

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

tts/providers/audio8.jsView on unpkg · L492

•Trigger-reachable chain: manifest.main -> src/index.js -> src/cli.js -> tts/providers/audio8.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

tts/providers/audio8.jsView on unpkg

216const home = (function(){ L217: try { return execSync('/bin/bash -c "echo $HOME"', { shell: '/bin/bash', stdio: 'pipe', encoding: 'utf8' }).trim() || '/root'; } L218: catch (e) { return '/root'; }

High

Shell

Package source references shell execution.

tts/providers/audio8.jsView on unpkg · L216

21Trigger-reachable persistence chain: manifest.main -> src/index.js -> src/cli.js -> tts/providers/audio8.js L21: L22: const { execFileSync, execSync, execFile } = require('child_process'); L23: const fs = require('fs'); ... L25: const os = require('os'); L26: const https = require('https'); L27: const http = require('http'); ... L92: ['-y', '-loglevel', 'error', '-i', wavFile, '-codec:a', 'libmp3lame', '-qscale:a', '4', mp3File], L93: (err, stdout, stderr) => { L94: if (err) return reject(new Error('ffmpeg WAV→MP3 转码失败: ' + String(stderr || err.message).split('\n')[0])); ... L161: }); L162: req.write(postData); L163: req.end();

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

tts/providers/audio8.jsView on unpkg · L21

21L22: const { execFileSync, execSync, execFile } = require('child_process'); L23: const fs = require('fs'); ... L25: const os = require('os'); L26: const https = require('https'); L27: const http = require('http'); ... L92: ['-y', '-loglevel', 'error', '-i', wavFile, '-codec:a', 'libmp3lame', '-qscale:a', '4', mp3File], L93: (err, stdout, stderr) => { L94: if (err) return reject(new Error('ffmpeg WAV→MP3 转码失败: ' + String(stderr || err.message).split('\n')[0])); ... L161: }); L162: req.write(postData); L163: req.end();

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

tts/providers/audio8.jsView on unpkg · L21

bin/postinstall-hint.jsView file

2L3: const logger = require('../src/logger'); L4:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/postinstall-hint.jsView on unpkg · L2

src/mp3server.jsView file

96try { L97: execSync('npm install --no-save node-windows', { cwd: workdir, stdio: 'inherit' }); L98: } catch (e) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/mp3server.jsView on unpkg · L96

config-manager/app.pyView file

•path = config-manager/app.py kind = build_helper sizeBytes = 22302 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

config-manager/app.pyView on unpkg

audio8-assets/audio8-tts.tgzView file

•path = audio8-assets/audio8-tts.tgz kind = high_entropy_blob sizeBytes = 32250555 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

audio8-assets/audio8-tts.tgzView on unpkg

•path = audio8-assets/audio8-tts.tgz kind = compressed_blob sizeBytes = 32250555 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

audio8-assets/audio8-tts.tgzView on unpkg

•path = audio8-assets/audio8-tts.tgz kind = nested_archive_needs_inspection sizeBytes = 32250555 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

audio8-assets/audio8-tts.tgzView on unpkg

src/install.jsView file

•matchType = normalized_sha256 matchedPackage = @oxiaom/adoremix@1.0.41 matchedPath = src/install.js matchedIdentity = npm:QG94aWFvbS9hZG9yZW1peA:1.0.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High