registry / grix-connector / 4.16.1
grix-connector@4.16.1
⚠ Under reviewConnect local AI coding agents (Claude, Codex, Gemini, Qwen, DeepSeek, Cursor, OpenCode, Pi, OpenHuman, Reasonix) to the Grix scheduling platform. Also serves as an OpenClaw plugin for Grix channel transport.
AI Security Review
scanned 17h ago · by lpm-firewall-aiThe inspected lifecycle behavior is an upgrade-helper installation, and the available excerpts do not establish an attack. A clean verdict cannot be supported because required runtime paths remain unresolved and a required binary archive cannot be cited as UTF-8 source.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package through npm runs its postinstall hook.
Impact
The helpers support package upgrade activation and rollback; the available excerpts do not establish malicious behavior.
Mechanism
The hook copies package-supplied guardian scripts into the user’s Grix home directory and marks them executable; the shell guardian later checks local health and can start the installed CLI during upgrade activation.
AI rationale
The inspected lifecycle behavior is an upgrade-helper installation, and the available excerpts do not establish an attack. A clean verdict cannot be supported because required runtime paths remain unresolved and a required binary archive cannot be cited as UTF-8 source.
Evidence
package.jsonscripts/install-guardian.mjsscripts/upgrade-guardian.shdist/core/upgrade/upgrade-checker.jsscripts/upgrade-guardian.mjs
Network endpoints1
127.0.0.1:${HEALTH_PORT}/healthz
Decision evidence
public snapshotAI called this Manual Review at 76.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The postinstall hook copies package-provided upgrade guardians into the user’s Grix home directory and marks them executable.
- The shell guardian checks a local health endpoint and runs the installed grix-connector CLI to activate an upgrade.
- The required clean review includes many runtime files that were not resolved, and a required packaged archive cannot be cited as UTF-8 source.
Evidence against
- The inspected guardian behavior is consistent with upgrade activation and rollback; no concrete attack was established in the inspected excerpts.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
25 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-guardian.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgopenclaw-plugin/index.jsView file
2450// src/audit/producer/ipc-audit-producer.ts
L2451: import { fork } from "node:child_process";
L2452: import { randomUUID as randomUUID2 } from "node:crypto";
High
Child Process
Package source references child process execution.
openclaw-plugin/index.jsView on unpkg · L2450dist/core/runtime/spawn.jsView file
1import{accessSync as l,constants as w}from"node:fs";import{spawn as d,execSync as h}from"node:child_process";import{isAbsolute as P,join as m}from"node:path";const S=process.platfo...
L2: `).forEach(s=>{const r=parseInt(s.trim(),10);!isNaN(r)&&r>0&&o.push(r)})}),n.on("close",()=>e(o)),n.on("error",()=>e([]))})}function A(t){return W(t)}function W(t){return new Promi...
Findings
20 High6 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processopenclaw-plugin/index.js
HighShelldist/core/runtime/spawn.js
HighSame File Env Network Executiondist/core/upgrade/upgrade-checker.js
HighCommand Output Exfiltrationdist/core/provider-quota/kiro.js
HighSandbox Evasion Gated Capabilitydist/core/installer/npm-registry.js
HighTrigger Reachable Command Output Exfiltrationdist/adapter/codex/codex-bridge.js
HighShips High Entropy Blobdist/assets/dsh-bridge/grix-dsh-bridge-4.16.1.tgz
HighKnown Malware Source Similaritydist/core/installer/npm-registry.js
HighKnown Malware Source Similaritydist/core/upgrade/upgrade-checker.js
Affected versions and remediation
This report applies to grix-connector@4.16.1.
See all versions of grix-connector for other recorded verdicts.
- Review the evidence and your use of grix-connector@4.16.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.