registry / Credential exfiltration / @zortexhq/install / 0.1.30

@zortexhq/install@0.1.30

Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

Zortex Windows Codex bootstrap

AI Security Review

scanned 2h ago · by lpm-firewall-ai

The package has no install hook, and the OAuth browser helper checks provider origins and state. However, the runtime forwards stored Google refresh tokens to a fixed broker, leaving a concrete credential exposure risk unresolved; warn rather than block.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A runtime Google OAuth token refresh when no client secret is supplied.

Impact

The broker receives a reusable Google refresh token; the source does not show what the broker does with it.

Mechanism

The refresh helper builds a request containing the stored refresh token and posts it to the compiled broker URL.

AI rationale

Evidence

dist/indrad-main.js

Network endpoints1

zortex-google-oauth.google-oauth-broker.workers.dev/google/refresh

Decision evidence

public snapshot

AI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The `zortex` CLI copies its bundled runtime into the user app directory and launches it with Bun when invoked.
The runtime stores OAuth refresh tokens and sends them in POST requests to a Zortex-hosted Google refresh broker when no client secret is supplied.
The broker is a fixed package-selected recipient; the inspected source does not establish recipient-specific consent for forwarding stored Google refresh tokens there.

Evidence against

The manifest declares a Windows x64 CLI and an optional Bun runtime dependency, with no install lifecycle hook.
The OAuth browser helper accepts Google or Microsoft authorization input and launches a local PowerShell helper.
The PowerShell helper checks the authorization origin and expected OAuth state and client before proceeding.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStrings

Source & flagged code

8 flagged

bin/zortex.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2"use strict";

4const { spawnSync } = require("node:child_process");

5const { copyFileSync, cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, statSync } = require("node:fs");

High

Child Process

Package source references child process execution.

bin/zortex.jsView on unpkg · L3

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/zortex.jsView on unpkg · L3

6const { homedir } = require("node:os");

7const { delimiter, join } = require("node:path");

9const ROOT = join(__dirname, "..");

10function isFile(path) {

11 try {

12 return statSync(path).isFile();

13 } catch {

14 return false;

15 }

16}

18function installBundle(appRoot, packageRoot = ROOT) {

19 const version = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8")).version;

20 if (typeof version !== "string" || !/^[0-9A-Za-z.-]+$/.test(version)) throw new Error("package version is invalid");

21 const appDir = join(appRoot, "app");

22 const target = join(appDir, version);

23 const bundle = join(target, "dist", "zortex.js");

dist/indrad-main.jsView file

518`,"utf8");if(Z.length>=this.size)return;if(this.writeOffset+Z.length>this.size){let Q=this.size-this.writeOffset;if(Q>0)LY(this.fd,Buffer.alloc(Q),0,Q,p9+this.writeOffset);this.wri... L519: `);return(X>=0?Q.slice(X+1):"")+Z}close(){this.flushHeader(),CN(this.fd)}}w();class Z6{talon;constructor($){this.talon=$}requestRecall($,Z){if($.by==="watchdog"&&Z.kind!=="kernel")... L520: budget_tokens, budget_usd, budget_wallclock_min, respawn_of, reap_count, model_pin, trace_id, ... L531: `)}async submit($,Z,Q){let X=this.awaitHandshake();this.write({t:"submit",order:$,slice:Z,workerType:Q});let z=await X;if(z.t==="submitted")return this.runId=z.runId,H({runId:z.run... L532: `,"\\n")}function s0($,Z){return`${$} = "${GA(Z)}"`}var wJ=0;function UA($=process.env){let Z=$.ZORTEX_WAN_TRANSPORT?.tr

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/indrad-main.jsView on unpkg · L518

518`,"utf8");if(Z.length>=this.size)return;if(this.writeOffset+Z.length>this.size){let Q=this.size-this.writeOffset;if(Q>0)LY(this.fd,Buffer.alloc(Q),0,Q,p9+this.writeOffset);this.wri... L519: `);return(X>=0?Q.slice(X+1):"")+Z}close(){this.flushHeader(),CN(this.fd)}}w();class Z6{talon;constructor($){this.talon=$}requestRecall($,Z){if($.by==="watchdog"&&Z.kind!=="kernel")... L520: budget_tokens, budget_usd, budget_wallclock_min, respawn_of, reap_count, model_pin, trace_id, ... L527: terminal_order_failure_reason = ? L528: WHERE run_id = ?`).run(L,Z,J,U,Y??null,$)}else if(W.terminal_payload_json!==J||W.terminal_summary_json!==U||W.terminal_order_failure_reason!==(Y??null))return x("failed_preconditio... L529: `);while(Z>=0){let Q=this.buffer.slice(0,Z).trim();if(this.buffer=this.buffer.sl

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/indrad-main.js

dist/zortex.jsView file

2Cross-file remote execution chain: dist/zortex.js spawns dist/indrad-main.js; helper contains network access plus dynamic code execution. L2: // @bun L3: var _R=Object.defineProperty;var RR=($)=>$;function SR($,Z){this[$]=RR.bind(null,Z)}var G8=($,Z)=>{for(var Q in Z)_R($,Q,{get:Z[Q],enumerable:!0,configurable:!0,set:SR.bind(Z,Q)})}... L4: `||X==="\r"){Q++;continue}if(X==='"'){let Y=Q+1,W="";while(Y<$.length&&$.charAt(Y)!=='"'){if($.charAt(Y)==="\\"){let j=$.charAt(Y+1);if(j==='"'||j==="\\"){W+=j,Y+=2;continue}return... L5: PRAGMA journal_mode = MEMORY; ... L20: ORDER BY sort_key, first_line L21: `),new S4($,Z,Q,X)}catch(z){let Y=[];if(X!==null)try{X.finalize()}catch(W){Y.push(W)}if(Q!==null)try{Q.finalize()}catch(W){Y.push(W)}if(Z!==null)try{Z.finalize()}catch(W){Y.push(W)... L22: CREATE

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/zortex.jsView on unpkg · L2

dist/windows-uia-oauth.ps1View file

•path = dist/windows-uia-oauth.ps1 kind = build_helper sizeBytes = 19547 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/windows-uia-oauth.ps1View on unpkg

dist/microsoft-oauth-browser.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @zortexhq/install@0.1.27 matchedIdentity = npm:QHpvcnRleGhxL2luc3RhbGw:0.1.27 similarity = 0.778 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/microsoft-oauth-browser.cjsView on unpkg

Source & flagged code

8 flagged · loading source

bin/zortex.jsView file

3L4: const { spawnSync } = require("node:child_process"); L5: const { copyFileSync, cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, statSync } = require("node:fs");

High

Child Process

Package source references child process execution.

bin/zortex.jsView on unpkg · L3

3L4: const { spawnSync } = require("node:child_process"); L5: const { copyFileSync, cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, statSync } = require("node:fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/zortex.jsView on unpkg · L3

dist/indrad-main.jsView file

Findings

1 Critical5 High5 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/microsoft-oauth-browser.cjs

HighChild Processbin/zortex.js

HighSame File Env Network Executiondist/indrad-main.js

HighCommand Output Exfiltrationdist/indrad-main.js

HighCross File Remote Execution Contextdist/zortex.js

HighSemantic Analysis Limiteddist/indrad-main.js

MediumDynamic Requirebin/zortex.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist/windows-uia-oauth.ps1

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @zortexhq/install@0.1.30.

See all versions of @zortexhq/install for other recorded verdicts.

Review the evidence and your use of @zortexhq/install@0.1.30 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-23 01:51:10.986Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.