claude-codex-wechat@0.1.53: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

claude-codex-wechat@0.1.53: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

dist/server/cli.jsView file

4// src/cli.ts L5: import { execFile as execFile2 } from "node:child_process"; L6: import { existsSync as existsSync11, readFileSync as readFileSync10 } from "node:fs"; ... L24: // src/channels/weixin-direct/loginClient.ts L25: var DEFAULT_BASE_URL = "https://ilinkai.weixin.qq.com"; L26: var WeixinDirectLoginClient = class { ... L63: if (!response.ok) throw new Error(`weixin_login_request_failed:${response.status}`); L64: const payload = await response.json(); L65: return payload.data ?? payload; ... L73: function defaultConfigPath() { L74: return join(homedir(), ".claude-codex-wechat", "config.json"); L75: }

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/server/cli.jsView on unpkg · L4

•Trigger-reachable chain: manifest.bin -> dist/server/cli.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/server/cli.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = claude-codex-wechat@0.1.52 matchedIdentity = npm:Y2xhdWRlLWNvZGV4LXdlY2hhdA:0.1.52 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/cli.jsView on unpkg

4// src/cli.ts L5: import { execFile as execFile2 } from "node:child_process"; L6: import { existsSync as existsSync11, readFileSync as readFileSync10 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/server/cli.jsView on unpkg · L4

4Detached bundled service listener: dist/server/cli.js launches a Node helper and exposes a broad-bound HTTP listener. L4: // src/cli.ts L5: import { execFile as execFile2 } from "node:child_process"; L6: import { existsSync as existsSync11, readFileSync as readFileSync10 } from "node:fs"; ... L24: // src/channels/weixin-direct/loginClient.ts L25: var DEFAULT_BASE_URL = "https://ilinkai.weixin.qq.com"; L26: var WeixinDirectLoginClient = class { ... L63: if (!response.ok) throw new Error(`weixin_login_request_failed:${response.status}`); L64: const payload = await response.json(); L65: return payload.data ?? payload; ... L73: function defaultConfigPath() { L74: return join(homedir(), ".claude-codex-wechat", "config.json"); L75: }

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/server/cli.jsView on unpkg · L4

4// src/cli.ts L5: import { execFile as execFile2 } from "node:child_process"; L6: import { existsSync as existsSync11, readFileSync as readFileSync10 } from "node:fs"; ... L24: // src/channels/weixin-direct/loginClient.ts L25: var DEFAULT_BASE_URL = "https://ilinkai.weixin.qq.com"; L26: var WeixinDirectLoginClient = class { ... L63: if (!response.ok) throw new Error(`weixin_login_request_failed:${response.status}`); L64: const payload = await response.json(); L65: return payload.data ?? payload; ... L73: function defaultConfigPath() { L74: return join(homedir(), ".claude-codex-wechat", "config.json"); L75: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/server/cli.jsView on unpkg · L4

dist/mcp/mediaServer.jsView file

94// src/mcp/tools/douyinDownload.ts L95: import { execFile } from "node:child_process"; L96: import { existsSync } from "node:fs"; ... L100: import { z as z2 } from "zod"; L101: var BRIDGE_API_URL2 = process.env.BRIDGE_API_URL || "http://localhost:8787"; L102: function douyinScriptCandidates(baseDir) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/mcp/mediaServer.jsView on unpkg · L94

126return new Promise((resolve2, reject) => { L127: execFile("node", [script, ...args], { timeout: 12e4 }, (err, stdout, stderr) => { L128: if (err) reject(new Error(stderr || err.message)); ... L134: const fileName = basename2(filePath) || "video.mp4"; L135: const response = await fetch(`${BRIDGE_API_URL2}/api/channel/send-media`, { L136: method: "POST", L137: headers: { "content-type": "application/json" }, L138: body: JSON.stringify({ kind, filePath, fileName }) L139: });

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/mcp/mediaServer.jsView on unpkg · L126

Source & flagged code

8 flagged

dist/server/cli.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2import { createRequire as __cjsCreateRequire } from 'node:module'; const require = __cjsCreateRequire(import.meta.url);

3

4// src/cli.ts

5import { execFile as execFile2 } from "node:child_process";

6import { existsSync as existsSync11, readFileSync as readFileSync10 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/server/cli.jsView on unpkg · L4

7import { promisify as promisify2 } from "node:util";

8import { dirname as dirname9, join as join14 } from "node:path";

9import { fileURLToPath as fileURLToPath3 } from "node:url";

10

11// src/daemon/bootstrap.ts

12import { networkInterfaces } from "node:os";

13

14// src/daemon/server.ts

15import { mkdtempSync, existsSync as existsSync9, writeFileSync as writeFileSync2 } from "node:fs";

16import { tmpdir as tmpdir2 } from "node:os";

17import { dirname as dirname7, join as join11 } from "node:path";

18import { fileURLToPath as fileURLToPath2 } from "node:url";

19import Fastify from "fastify";

20

21// src/channels/platforms.ts

22var PRIMARY_WEIXIN_PLATFORM = "weixin";

23

24// src/channels/weixin-direct/loginClient.ts

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/server/cli.jsView on unpkg · L4

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/server/cli.jsView on unpkg · L4

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/server/cli.jsView on unpkg · L4

•Trigger-reachable chain: manifest.bin -> dist/server/cli.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/server/cli.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = claude-codex-wechat@0.1.52 matchedIdentity = npm:Y2xhdWRlLWNvZGV4LXdlY2hhdA:0.1.52 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/cli.jsView on unpkg

dist/mcp/mediaServer.jsView file

Lines 74-146javascript

74 server2.registerTool(

75 "send_file",

76 {

77 description: '\u5C06\u6587\u4EF6\u53D1\u9001\u5230\u7528\u6237\u5FAE\u4FE1\u3002\u7528\u6237\u8BF4"\u628A\u6587\u4EF6\u53D1\u7ED9\u6211""\u6587\u6863\u53D1\u51FA\u6765""\u628AXX\u4F20\u7ED9\u6211"\u65F6\u8C03\u7528\u3002\u652F\u6301 PDF\u3001\u6587\u6863\u3001\u4EE3\u7801\u3001\u538B\u7F29\u5305\u7B49\u6240\u6709\u7C7B\u578B\u3002