registry / Remote code execution / gitxelectron / 1.2.6

gitxelectron@1.2.6

An elegant, completely silent auto-syncing Git client. Works as a desktop app and npm CLI tool.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This is a dangerous remote-command execution capability and intrusive install-time behavior, but the inspected source does not establish covert credential export, a foreign AI-agent control-surface mutation, or a complete malicious install chain. It should be warned rather than blocked.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Install the package, or run gitxelectron push and encounter a Git error.

Impact

A model response can run arbitrary commands with the invoking user's permissions; install hooks can interrupt matching local processes.

Mechanism

Lifecycle process control and unvalidated remote-model command execution.

AI rationale

Evidence

package.jsonbin/preuninstall.jsbin/postinstall.jsbin/cli.js

Network endpoints1

router.huggingface.co/v1

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package runs both preinstall and postinstall lifecycle hooks automatically.
The preinstall hook force-terminates processes whose command line matches GitElectron.
A failed user-invoked CLI push sends error and repository status to an AI service, then executes every returned command without validation or confirmation.
The postinstall hook runs an external dependency-install command and auto-launches the Electron app for global installs.

Evidence against

The inspected GitHub token requests target GitHub endpoints or the stated GitHub Models API endpoint; no unrelated token recipient was confirmed.
Desktop AI conflict changes require a separate approval IPC action before they are written and pushed.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

10 flagged

package.jsonView file

•scripts.preinstall = node ./bin/preuninstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

2L3: const { spawn } = require('child_process') L4: const path = require('path')

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L2

46const { execSync } = require('child_process'); L47: execSync(`powershell -NoProfile -Command "${psCommand}"`, { stdio: 'ignore' }); L48: console.log('✅ Desktop shortcut created successfully!');

High

Shell

Package source references shell execution.

bin/postinstall.jsView on unpkg · L46

13const { execSync } = require('child_process') L14: execSync('npx electron-builder install-app-deps', { stdio: 'inherit' }) L15: } else {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/postinstall.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = gitxelectron@1.2.1 matchedPath = bin/postinstall.js matchedIdentity = npm:Z2l0eGVsZWN0cm9u:1.2.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

out/main/index.jsView file

37const decrypted = electron.safeStorage.decryptString(encrypted); L38: accounts = JSON.parse(decrypted); L39: } ... L116: async function startDeviceFlow(_sessionId) { L117: const response = await fetch("https://github.com/login/device/code", { L118: method: "POST", ... L122: }, L123: body: JSON.stringify({ L124: client_id: GITHUB_CLIENT_ID, ... L360: } L361: async function createGitHubRepository(sessionId, name, description, isPrivate, autoInit = false, gitignoreTemplate = "", licenseTemplate = "") { L362: const token = getToken(sessionId);

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

out/main/index.jsView on unpkg · L37

37Trigger-reachable chain: manifest.main -> out/main/index.js L37: const decrypted = electron.safeStorage.decryptString(encrypted); L38: accounts = JSON.parse(decrypted); L39: } ... L116: async function startDeviceFlow(_sessionId) { L117: const response = await fetch("https://github.com/login/device/code", { L118: method: "POST", ... L122: }, L123: body: JSON.stringify({ L124: client_id: GITHUB_CLIENT_ID, ... L360: } L361: async function createGitHubRepository(sessionId, name, description, isPrivate, autoInit = false, gitignoreTemplate = "", licenseTemplate = "") { L362: const token = getToken(sessionId);

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

out/main/index.jsView on unpkg · L37

•matchType = previous_version_dangerous_delta matchedPackage = gitxelectron@1.2.2 matchedIdentity = npm:Z2l0eGVsZWN0cm9u:1.2.2 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

bin/cli.jsView file

•matchType = normalized_sha256 matchedPackage = gitxelectron@1.2.1 matchedPath = bin/cli.js matchedIdentity = npm:Z2l0eGVsZWN0cm9u:1.2.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.preinstall = node ./bin/preuninstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

2L3: const { spawn } = require('child_process') L4: const path = require('path')

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L2

Findings

3 Critical6 High4 Medium5 Low

CriticalHardcoded Runtime Data Exfiltrationout/main/index.js

CriticalTrigger Reachable Dangerous Capabilityout/main/index.js

CriticalPrevious Version Dangerous Deltaout/main/index.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/postinstall.js

HighShellbin/postinstall.js

HighRuntime Package Installbin/postinstall.js

HighKnown Malware Source Similaritybin/cli.js

HighKnown Malware Source Similaritybin/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

Affected versions and remediation

This report applies to gitxelectron@1.2.6.

See all versions of gitxelectron for other recorded verdicts.

Review the evidence and your use of gitxelectron@1.2.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 14:12:20.735Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.