registry / @remotekit/client / 0.25.2

@remotekit/client@0.25.2

RemoteKit 客户端 SDK（被管理端）

AI Security Review

scanned 2h ago · by lpm-firewall-ai

The SDK can connect to an integrator-configured Socket.IO server and dispatch commands. Optional helpers can execute shell commands or dynamically evaluate plugin source, creating a remote-code-execution capability when enabled by the consumer.

Static reason

One or more suspicious static signals were detected.

Trigger

Consumer creates and starts RemoteKitClient, then enables/registers shell or dynamic-plugin functionality.

Impact

A configured management server could run commands, manage processes, access permitted files, or capture screens on the host.

Mechanism

Authenticated remote command dispatch with optional shell execution and dynamic plugin evaluation.

Rationale

Source inspection shows an opt-in remote-management SDK with concrete RCE-capable features, but no autonomous execution, lifecycle hook, credential harvesting, or undisclosed exfiltration. Warn for dangerous dual-use capability rather than block as malicious.

Evidence

package.jsondist/index.cjs

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/index.cjs` PluginLoader executes `plugin.code` with `new Function` when `allowDynamic` is enabled.
`dist/index.cjs` exposes `shell:exec`, which runs supplied commands via `child_process.exec` when explicitly enabled.
`dist/index.cjs` includes remote-facing process kill/restart, file, system, and screen-capture handler factories.

Evidence against

`package.json` has no preinstall, install, postinstall, or executable bin hook.
Importing `dist/index.cjs` only defines exports; network connection starts only after `RemoteKitClient.start()`.
Socket endpoint and authentication token are caller-supplied; no hard-coded external command-and-control host was found.
Dynamic plugins and shell execution are disabled unless the integrator opts in and registers/uses them.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemShellWebSocket

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 213 KB of source

Source & flagged code

4 flagged

dist/index.jsView file

Lines 37-77javascript

37 const transferId = crypto.randomUUID();

38 this.sessions.set(transferId, {

39 transferId,

40 path: params.path,

41 size: params.size,

42 checksum: params.checksum,

43 receivedBytes: 0,

44 chunks: [],

45 createdAt: Date.now()

46 });

47 this.activeCount++;

48 return { transferId };

49 }

50 /** 接收文件分块 */

51 async receiveChunk(params) {

52 const session = this.sessions.get(params.transferId);

53 if (!session) {

54 throw new RemoteKitError(ErrorCode.TRANSFER_EXPIRED, "\u4F20\u8F93\u4F1A\u8BDD\u4E0D\u5B58\u5728\u6216\u5DF2\u8FC7\u671F");

55 }

56 let chunk;

57 try {

58 chunk = zlib.gunzipSync(params.data);

59 } catch {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L57

60 chunk = params.data;

61 }

62 session.chunks.push(chunk);

63 session.receivedBytes += chunk.length;

64 return { received: session.receivedBytes };

65 }

66 /** 完成接收，校验并写入文件 */

67 async finishUpload(params) {

68 const session = this.sessions.get(params.transferId);

69 if (!session) {

70 throw new RemoteKitError(ErrorCode.TRANSFER_EXPIRED, "\u4F20\u8F93\u4F1A\u8BDD\u4E0D\u5B58\u5728\u6216\u5DF2\u8FC7\u671F");

71 }

72 const data = Buffer.concat(session.chunks);

73 const actualChecksum = crypto.createHash("sha256").update(data).digest("hex");

74 if (actualChecksum !== session.checksum) {

75 this.removeSession(params.transferId);

76 throw new RemoteKitError(ErrorCode.TRANSFER_FAILED, "\u6587\u4EF6\u6821\u9A8C\u5931\u8D25");

77 }

Lines 127-167javascript

127 if (this.sessions.delete(transferId)) {

128 this.activeCount--;

129 }

130 }

131 cleanupExpired() {

132 const now = Date.now();

133 for (const [id, session

Lines 758-798javascript

758 if (!plugin) return false;

759 for (const cmd of Object.keys(plugin.handlers)) {

760 this.removeHandler(cmd);

761 }

762 this.loaded.delete(name);

763 return true;

dist/chunk-K2EJONCQ.jsView file

Lines 201-241javascript

201 this.reconnectTimer = null;

202 }

203 }

204 setupSocketListeners() {

205 if (!this.socket) return;

206 this.socket.on("disconnect", (reason) =>

Source & flagged code

4 flagged · loading source

dist/index.jsView file

147import os from "os"; L148: import { execSync } from "child_process"; L149: function createSystemHandlers() {

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L147

57Cross-file remote execution chain: dist/index.js spawns dist/chunk-K2EJONCQ.js; helper contains network access plus dynamic code execution. L57: try { L58: chunk = zlib.gunzipSync(params.data); L59: } catch { ... L110: const compressed = zlib.gzipSync(chunk); L111: return { data: compressed }; L112: } ... L147: import os from "os"; L148: import { execSync } from "child_process"; L149: function createSystemHandlers() { ... L162: arch: os.arch(), L163: hostname: os.hostname(), L164: uptime: os.uptime(),

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L57

778try { L779: const fn = new Function("exports", plugin.code); L780: const exports = {};

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L778

dist/chunk-K2EJONCQ.jsView file

221generateDeviceId() { L222: const hostname = __require("os").hostname(); L223: const raw = `${process.pid}:${hostname}:${Date.now()}`;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-K2EJONCQ.jsView on unpkg · L221

Findings

3 High2 Medium4 Low

HighChild Processdist/index.js

HighShell

HighCross File Remote Execution Contextdist/index.js

MediumDynamic Requiredist/chunk-K2EJONCQ.js

MediumEnvironment Vars

LowScripts Present

LowEvaldist/index.js

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

4 flagged

dist/index.jsView file

Lines 37-77javascript

37 const transferId = crypto.randomUUID();

38 this.sessions.set(transferId, {

39 transferId,

40 path: params.path,

41 size: params.size,

42 checksum: params.checksum,

43 receivedBytes: 0,

44 chunks: [],

45 createdAt: Date.now()

46 });

47 this.activeCount++;

48 return { transferId };

49 }

50 /** 接收文件分块 */

51 async receiveChunk(params) {

52 const session = this.sessions.get(params.transferId);

53 if (!session) {

54 throw new RemoteKitError(ErrorCode.TRANSFER_EXPIRED, "\u4F20\u8F93\u4F1A\u8BDD\u4E0D\u5B58\u5728\u6216\u5DF2\u8FC7\u671F");

55 }

56 let chunk;

57 try {

58 chunk = zlib.gunzipSync(params.data);

59 } catch {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L57

60 chunk = params.data;

61 }

62 session.chunks.push(chunk);

63 session.receivedBytes += chunk.length;

64 return { received: session.receivedBytes };

65 }

66 /** 完成接收，校验并写入文件 */

67 async finishUpload(params) {

68 const session = this.sessions.get(params.transferId);

69 if (!session) {

70 throw new RemoteKitError(ErrorCode.TRANSFER_EXPIRED, "\u4F20\u8F93\u4F1A\u8BDD\u4E0D\u5B58\u5728\u6216\u5DF2\u8FC7\u671F");

71 }

72 const data = Buffer.concat(session.chunks);

73 const actualChecksum = crypto.createHash("sha256").update(data).digest("hex");

74 if (actualChecksum !== session.checksum) {

75 this.removeSession(params.transferId);

76 throw new RemoteKitError(ErrorCode.TRANSFER_FAILED, "\u6587\u4EF6\u6821\u9A8C\u5931\u8D25");

77 }

Lines 127-167javascript

127 if (this.sessions.delete(transferId)) {

128 this.activeCount--;

129 }

130 }

131 cleanupExpired() {

132 const now = Date.now();

133 for (const [id, session

Lines 758-798javascript

758 if (!plugin) return false;

759 for (const cmd of Object.keys(plugin.handlers)) {

760 this.removeHandler(cmd);

761 }

762 this.loaded.delete(name);

763 return true;

dist/chunk-K2EJONCQ.jsView file

Lines 201-241javascript

201 this.reconnectTimer = null;

202 }

203 }

204 setupSocketListeners() {

205 if (!this.socket) return;

206 this.socket.on("disconnect", (reason) =>