registry / Remote code execution / gitxelectron

gitxelectron

An elegant, completely silent auto-syncing Git client. Works as a desktop app and npm CLI tool.

This report shows the evidence for gitxelectron@1.2.1. 3 of 21 known versions are blocked or flagged. The newest version, 1.4.1, is flagged. See all versions.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package combines external AI-controlled command execution with disclosure of a GitHub token to a non-GitHub endpoint. Install hooks and a detached global updater further expand the unconsented execution surface.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Run the CLI push command and encounter an error, or invoke the desktop AI repair feature.

Impact

A remote service or compromised model response can run arbitrary local commands; a GitHub access token is disclosed to an unrelated endpoint.

Mechanism

External AI response execution and GitHub token disclosure.

Attack narrative

During CLI error recovery, the package sends Git state and an error to a remote AI provider and passes every returned command directly to shell execution. In the desktop path, it retrieves the locally stored GitHub OAuth token and uses that token as the API credential for an Azure AI service. Its update handler also launches a detached command shell that globally installs this and another package. These are concrete remote-command and credential-disclosure paths, not required Git client behavior.

AI rationale

Evidence

package.jsonbin/cli.jsout/main/index.js

Network endpoints2

router.huggingface.co/v1models.inference.ai.azure.com

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The install lifecycle runs a script before installation and another afterward.
The CLI sends Git status and errors to an external AI service, then executes every returned command through a shell.
The desktop app sends its stored GitHub access token as an API key to a non-GitHub AI endpoint.
The updater silently installs this package and a second package globally through a detached Windows command shell.

Evidence against

GitHub OAuth requests and repository operations are consistent with the advertised Git client functionality.
No hidden binary payload or obfuscated loader was found in the inspected package files.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 1.25 MB of source, external domains: api.github.com, dev.azure.com, github.com, models.inference.ai.azure.com, react.dev, registry.npmjs.org, router.huggingface.co, www.w3.org

Source & flagged code

10 flagged

package.jsonView file

•scripts.postinstall = node ./bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

Lines 1-58javascript

1#!/usr/bin/env node

3const { spawn } = require('child_process')

4const path = require('path')

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L2

6console.log('Installing GitElectron dependencies...')

8// Run electron-builder install-app-deps (only fails if not in dev mode, so we wrap it)

9try {

10 const isGlobal = process.env.npm_config_global === 'true'

12 if (!isGlobal) {

13 const { execSync } = require('child_process')

14 execSync('npx electron-builder install-app-deps', { stdio: 'inherit' })

15 } else {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/postinstall.jsView on unpkg · L13

16 // If installed globally via NPM, spawn the app to prompt for login

17 let electronPath

18 try {

19 electronPath = require('electron')

20 } catch (e) {

21 console.error('Electron binary not found. Skipping auto-launch.')

22 process.exit(0)

23 }

25 console.log('First time setup: Launching GitElectron for authentication...')

26 const appPath = path.resolve(__dirname, '..')

27 const child = spawn(electronPath, [appPath], {

28 detached: true,

29 stdio: 'ignore'

30 })

31 child.unref()

33 // Create a Desktop Shortcut for easy access

34 if (process.platform === 'win32') {

35 try {

36 const os = require('os')

37 const desktopPath = path.join(os.homedir(), 'Desktop', 'GitElectron.lnk')

39 const psCommand = `

40 $WshShell = New-Object -comObject WScript.Shell;

41 $Shortcut = $WshShell.CreateShortcut("${desktopPath}");

42 $Shortcut.TargetPath = "${electronPath}";

43 $Shortcut.Arguments = "\\"${appPath}\\"";

44 $Shortcut.Save();

45 `;

46 const { execSync } = require('child_process');

47 execSync(`powershell -NoProfile -Command "${psCommand}"`, { stdio: 'ignore' });

48 console.log('✅ Desktop shortcut created successfully!');

High

Shell

Package source references shell execution.

bin/postinstall.jsView on unpkg · L46

49 } catch (err) {

50 console.log('Failed to create Desktop shortcut.');

51 }

52 }

53 }

54} catch (e) {

55 // Ignore errors on postinstall

56 console.log('Postinstall step completed.')

57}

•matchType = normalized_sha256 matchedPackage = gitxelectron@1.1.7 matchedPath = bin/postinstall.js matchedIdentity = npm:Z2l0eGVsZWN0cm9u:1.1.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

out/main/index.jsView file

Lines 17-57javascript

17 Object.defineProperty(n, k, d.get ? d : {

18 enumerable: true,

19 get: () => e[k]

20 });

21 }

22 }

23 }

bin/cli.jsView file

•matchType = normalized_sha256 matchedPackage = gitxelectron@1.1.7 matchedPath = bin/cli.js matchedIdentity = npm:Z2l0eGVsZWN0cm9u:1.1.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

2L3: const { spawn } = require('child_process') L4: const path = require('path')

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L2

Findings

3 Critical6 High4 Medium5 Low

CriticalHardcoded Runtime Data Exfiltrationout/main/index.js

CriticalTrigger Reachable Dangerous Capabilityout/main/index.js

CriticalPrevious Version Dangerous Deltaout/main/index.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/postinstall.js

HighShellbin/postinstall.js

HighRuntime Package Installbin/postinstall.js

HighKnown Malware Source Similaritybin/cli.js

HighKnown Malware Source Similaritybin/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

Affected versions and remediation

This report applies to gitxelectron@1.2.1.

The versions list below shows the verdict for each recorded version.

Avoid installing gitxelectron@1.2.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-12 18:33:36.968Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

21 known versions

1.4.1latestSuspicious—WarnPublishedOct 14, 2026, 5:29 PM 1.3.9SuspiciousRemote Code ExecutionWarnPublishedOct 9, 2026, 7:15 AM 1.3.8SuspiciousRemote Code ExecutionWarnPublishedOct 6, 2026, 9:48 PM 1.3.7SuspiciousRemote Code ExecutionWarnPublishedOct 4, 2026, 7:47 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code