registry / Remote code execution / chemx / 26.9.11-631

chemx@26.9.11-631

Chemical X Protocol: Private drop-in architecture starter kit and capsule generator

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This is an explicit-user-command remote payload writer with unchecked paths, creating a meaningful supply-chain risk. No lifecycle hook or source evidence shows automatic execution or confirmed theft.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs the create, scaffold, or init CLI command and supplies a license key.

Impact

A compromised or redirected service can overwrite project-adjacent files and stage code for later execution.

Mechanism

Remote file-map download followed by unchecked filesystem writes.

AI rationale

Evidence

cli/license.jscli/scaffold.js

Network endpoints1

chemicalx.xophz.com/api/starter-kit/download

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The scaffold fetches a server-supplied file map using a license key and device identifier.
Returned file names and contents are written without path validation or integrity verification.
The endpoint can be changed through an environment variable.

Evidence against

package.json has no install lifecycle hook.
The download and writes require an explicit scaffold or init command.
GitHub token use is limited to the explicit audit-sharing path.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 37 file(s), 230 KB of source, external domains: api.github.com, chemicalx.xophz.com, github.com, img.shields.io, mycompassconsulting.com

Source & flagged code

5 flagged

cli/navigator-share.jsView file

Lines 1-22javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import { spawnSync } from 'node:child_process';

4import {

High

Child Process

Package source references child process execution.

cli/navigator-share.jsView on unpkg · L2

5 hasGum,

6 gumChoose,

7 gumInput,

8 promptQuestion,

9 openBrowser

10} from './terminal.js';

11import {

12 detectGitRepoInfo,

13 detectGitHubUser,

14 getAuditBaseline,

15 createSnapshotFromReport,

16 getAuditHistory,

17 generateTransformationDiscussionContent,

18 generateDiscussionContent,

19 publishDiscussion,

20 publishOrUpdateDiscussion,

21 getStoredDiscussion,

22 copyToClipboard,

cli/terminal.jsView file

Lines 1-29javascript

1import readline from "node:readline";

2import { spawnSync } from "node:child_process";

4export const openBrowser = (url) => {

cli/license.jsView file

Lines 1-23javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import os from 'node:os';

4import { spawnSync } from 'node:child_process';

cli/scaffold.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import path from 'node:path'; import { hasgum, guminput, promptquestion, renderbanner } from './terminal.js'; import { obtainlicensekey, fetchstarterkitfiles } from './license.js'; export const runscaffold = async (projectname, rawargs = [], onrunaudit = null) => { renderbanner('chemical x: molecular architecture scaffolder (npm create chemx)'); const licensekey = await obtainlicensekey(rawargs, onrunaudit); if (!licensekey) { process.stderr.write('\x1b[31m✕ valid license key is required to scaffold blueprints.\x1b[0m\n'); process.exit(1); } let targetname = projectname; if (!targetname) { targetname = hasgum() ? guminpu

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/scaffold.jsView on unpkg

Source & flagged code

5 flagged · loading source

cli/navigator-share.jsView file

2import path from 'node:path'; L3: import { spawnSync } from 'node:child_process'; L4: import {

High

Child Process

Package source references child process execution.

cli/navigator-share.jsView on unpkg · L2

cli/terminal.jsView file

9} else if (platform === "win32") { L10: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore" }); L11: } else {

High

Shell

Package source references shell execution.

cli/terminal.jsView on unpkg · L9

cli/license.jsView file

3import os from 'node:os'; L4: import { spawnSync } from 'node:child_process'; L5: import { ... L16: L17: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com'; L18: export const URL_LEARN = 'https://chemicalx.xophz.com';

Findings

5 High2 Medium5 Low

HighChild Processcli/navigator-share.js

HighShellcli/terminal.js

HighSame File Env Network Executioncli/license.js

HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js

HighPrevious Version Dangerous Deltacli/license.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to chemx@26.9.11-631.

See all versions of chemx for other recorded verdicts.

Review the evidence and your use of chemx@26.9.11-631 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 10:55:33.422Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.