Loading npm security reports…

kcgrouter@0.11.1: Malicious npm security report (Block) | LPM Firewall

registry / kcgrouter / 0.11.1

kcgrouter@0.11.1

Lightweight AI proxy gateway — route chat completions to upstream providers

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Installation silently creates an operating-system login persistence entry for a background kcgrouter daemon. This occurs by default on supported desktop platforms.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Installing the package with lifecycle scripts enabled.

Impact

The package gains persistence and automatically runs after user login without an explicit setup command.

Mechanism

Postinstall writes OS autostart configuration and launches a detached local daemon at login.

Attack narrative

On installation, npm executes scripts/postinstall.mjs. Unless the installer predefines an opt-out variable, the script writes a Windows Startup item, macOS LaunchAgent, or Linux XDG autostart entry. Those entries run kcgrouter with the daemon flag at the next user login. The daemon code detaches the child process and records its PID, making the automatically installed background service persistent.

Rationale

This is unconsented install-time operating-system persistence, not an explicit user setup action. The source directly creates login startup configuration and launches a background daemon.

Evidence

package.jsonscripts/postinstall.mjssrc/cli/daemon.tssrc/index.tssrc/env.ts~/Library/LaunchAgents/com.kcgrouter.plist~/.config/autostart/kcgrouter.desktop%APPDATA%/Microsoft/Windows/Start Menu/Programs/Startup/kcgrouter-startup.vbs

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = bun scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = bun scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/server/providers/qoder/cosy.tsView file

50L51: function pkcs7Pad(data: Buffer, blockSize: number): Buffer { L52: const padding = blockSize - (data.length % blockSize); ... L57: L58: function aesEncryptCbcBase64(plaintext: string, keyStr: string): string { L59: const keyBytes = Buffer.from(keyStr, "utf8"); ... L125: * @param creds Credentials used for signing. L126: * @returns Header map ready to merge onto fetch(). L127: */

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/server/providers/qoder/cosy.tsView on unpkg · L50

scripts/postinstall.mjsView file

6// because creating symlinks requires admin privileges / Developer Mode. L7: import { execSync } from "node:child_process"; L8: import { chmodSync, copyFileSync, existsSync, mkdirSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs"; ... L21: function resolveTraybin() { L22: let dir = process.cwd(); L23: for (;;) { ... L35: win32: { src: "tray_windows_release.exe", link: "tray_windows.exe" }, L36: }[process.platform]; L37: ... L64: const HOME = homedir(); L65: const KCGRouter_HOME = process.env.KCGRouter_HOME || join(HOME, ".kcgrouter"); L66: const isWin = process.platform === "win32";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/postinstall.mjsView on unpkg · L6

src/cli/menu.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.10.2 matchedPath = src/cli/menu.ts matchedIdentity = npm:a2Nncm91dGVy:0.10.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/menu.tsView on unpkg

src/db/client.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.10.2 matchedPath = src/db/client.ts matchedIdentity = npm:a2Nncm91dGVy:0.10.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/db/client.tsView on unpkg

src/lib/startup.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = kcgrouter@0.11.0 matchedIdentity = npm:a2Nncm91dGVy:0.11.0 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/lib/startup.tsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 17-57json

17 "bunfig.toml",

18 "tsconfig.json",

19 "!src/**/__tests__/**",

20 "!src/**/*.test.ts",

21 "!src/**/*.test.tsx",

22 "!src/test-setup.ts"

23 ],

24 "engines": {

25 "bun": ">=1.2.3"

26 },

27 "scripts": {

28 "dev": "KCGRouter_DEV=1 bun --hot src/index.ts",

29 "start": "NODE_ENV=production bun src/index.ts",

30 "build": "bun run build.ts",

31 "check": "biome check --write ./src",

32 "lint": "biome lint --write ./src",

33 "format": "biome format --write ./src",

34 "gen-env": "bash scripts/gen-env.sh",

35 "generate-icon": "bun scripts/generate-icon.ts",

36 "test": "bash scripts/test.sh",

37 "postinstall": "bun scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L37

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L37

38 "prepublishOnly": "bun run build"

39 },

40 "dependencies": {

41 "@clack/prompts": "^1.7.0",

42 "@radix-ui/react-label": "^2.1.7",

43 "@radix-ui/react-select": "^2.2.6",

44 "@radix-ui/react-slot": "^1.2.3",

45 "bun-plugin-tailwind": "^0.1.2",

46 "class-variance-authority": "^0.7.1",

47 "clsx": "^2.1.1",

48 "jsonc-parser": "^3.3.1",

49 "lucide-react": "^1",

50 "radix-ui": "^1.6.7",

51 "react": "^19",

52 "react-dom": "^19",

53 "recharts": "^3.10.1",

54 "sonner": "^2.0.7",

55 "systray2": "^2.1.4",

56 "tailwind-merge": "^3.3.1",

57 "tailwindcss": "^4.1.11",

src/server/providers/qoder/cosy.tsView file

Lines 30-70typescript

30 QODER_MACHINE_OS,

31 QODER_MACHINE_TYPE,

32 QODER_RSA_PUBLIC_KEY,

33} from "./constants";

34

35export interface CosyCreds {

36

scripts/postinstall.mjsView file

Lines 1-26javascript

1// Cross-platform postinstall: prepares systray2's native tray binaries and

2// registers kcgrouter to start automatically at user login.

3// On Unix it makes them executable and creates the platform symlinks that

4// systray2 looks for in debug mode. On Windows (where `chmod`/`ln` are not

5// available in bun's shell) it copies the binary instead of symlinking,

6// because creating symlinks requires admin privileges / Developer Mode.

7import { execSync } from "node:child_process";

8import { chmodSync, copyFileSync, existsSync, mkdirSync, symlinkSync, unlinkSync, writeFileSync }

src/cli/menu.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.10.2 matchedPath = src/cli/menu.ts matchedIdentity = npm:a2Nncm91dGVy:0.10.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/menu.tsView on unpkg

src/db/client.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.10.2 matchedPath = src/db/client.ts matchedIdentity = npm:a2Nncm91dGVy:0.10.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/db/client.tsView on unpkg

src/lib/startup.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = kcgrouter@0.11.0 matchedIdentity = npm:a2Nncm91dGVy:0.11.0 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/lib/startup.tsView on unpkg