gitxelectron@1.4.1

An elegant, completely silent auto-syncing Git client. Works as a desktop app and npm CLI tool.

AI Security Review

scanned 8d ago · by lpm-firewall-ai

The CLI silently executes AI-generated shell commands after a user-invoked push fails, which is a dangerous capability warranting a warning. The flagged desktop runtime locations describe repository and file operations, and its AI conflict repair uses an approval handler; the install hooks inspected do not establish a separate attack.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

The user runs the CLI push command and the Git operation fails.

Impact

A provider response can execute commands in the current working directory and affect the user's files or environment.

Mechanism

The CLI asks an AI service for repair commands and passes each returned command to execSync without a confirmation step.

AI rationale

Evidence

bin/cli.jsbin/ai-setup.js

Network endpoints2

models.inference.ai.azure.comrouter.huggingface.co

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

When a user invokes the CLI push command and it fails, the CLI sends the Git error and status to an AI provider, then runs returned commands with execSync without an approval step.
The flagged desktop runtime sites are Git, repository, and file operations tied to workspace paths or IPC requests; AI conflict changes go through an explicit approval handler.
The inspected lifecycle hooks run app shutdown and Electron native dependency setup; they do not show the reported data-exfiltration or remote-code behavior.

Evidence against

The desktop conflict-repair flow proposes changes through an approval event before applying them; the reviewed runtime locations do not establish unrelated automatic account actions.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

12 flagged

package.jsonView file

•scripts.postinstall = node ./bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/auto-push.jsView file

17const crypto = require('crypto') L18: const { spawnSync, spawn } = require('child_process') L19:

High

Child Process

Package source references child process execution.

bin/auto-push.jsView on unpkg · L17

14L15: const fs = require('fs') L16: const path = require('path')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/auto-push.jsView on unpkg · L14

bin/postinstall.jsView file

46const { execSync } = require('child_process') L47: execSync(`powershell -NoProfile -Command "${psCommand}"`, { stdio: 'ignore' }) L48: console.log('✅ Desktop shortcut created successfully!')

High

Shell

Package source references shell execution.

bin/postinstall.jsView on unpkg · L46

13const { execSync } = require('child_process') L14: execSync('npx electron-builder install-app-deps', { stdio: 'inherit' }) L15: } else {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/postinstall.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = gitxelectron@1.2.1 matchedPath = bin/postinstall.js matchedIdentity = npm:Z2l0eGVsZWN0cm9u:1.2.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

out/main/index.jsView file

6const crypto = require("crypto"); L7: const child_process = require("child_process"); L8: const generativeAi = require("@google/generative-ai"); ... L38: const decrypted = electron.safeStorage.decryptString(encrypted); L39: accounts = JSON.parse(decrypted); L40: } ... L133: async function startDeviceFlow(_sessionId) { L134: const response = await fetch("https://github.com/login/device/code", { L135: method: "POST", ... L139: }, L140: body: JSON.stringify({ L141: client_id: GITHUB_CLIENT_ID,

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

out/main/index.jsView on unpkg · L6

Critical

Download Execute

Source downloads or fetches remote code and executes it.

out/main/index.jsView on unpkg · L6

6Trigger-reachable chain: manifest.main -> out/main/index.js L6: const crypto = require("crypto"); L7: const child_process = require("child_process"); L8: const generativeAi = require("@google/generative-ai"); ... L38: const decrypted = electron.safeStorage.decryptString(encrypted); L39: accounts = JSON.parse(decrypted); L40: } ... L133: async function startDeviceFlow(_sessionId) { L134: const response = await fetch("https://github.com/login/device/code", { L135: method: "POST", ... L139: }, L140: body: JSON.stringify({ L141: client_id: GITHUB_CLIENT_ID,

bin/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = gitxelectron@1.3.9 matchedIdentity = npm:Z2l0eGVsZWN0cm9u:1.3.9 similarity = 0.571 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.jsView on unpkg

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/auto-push.jsView file

17const crypto = require('crypto') L18: const { spawnSync, spawn } = require('child_process') L19:

High

Child Process

Package source references child process execution.

bin/auto-push.jsView on unpkg · L17

Findings

4 Critical6 High5 Medium5 Low

CriticalHardcoded Runtime Data Exfiltrationout/main/index.js

CriticalDownload Executeout/main/index.js

CriticalTrigger Reachable Dangerous Capabilityout/main/index.js

CriticalPrevious Version Dangerous Deltabin/cli.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/auto-push.js

HighShellbin/postinstall.js

HighSandbox Evasion Gated Capabilityout/main/index.js

HighRuntime Package Installbin/postinstall.js

HighKnown Malware Source Similaritybin/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

Medium

Affected versions and remediation

This report applies to gitxelectron@1.4.1.

See all versions of gitxelectron for other recorded verdicts.

Review the evidence and your use of gitxelectron@1.4.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 17:46:23.423Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.