Loading npm security reports…

kcgrouter@0.13.3: Malicious npm security report (Block) | LPM Firewall

registry / kcgrouter / 0.13.3

kcgrouter@0.13.3

Lightweight AI proxy gateway — route chat completions to upstream providers

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing the package automatically creates an operating-system login-start entry that launches its daemon. The daemon is detached and persists as a background process.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

The package obtains user-login persistence without an explicit setup command and automatically runs its local service after login.

Mechanism

Automatic OS login persistence that launches a detached daemon.

Attack narrative

On installation, package.json invokes scripts/postinstall.mjs. Unless the installer already set an opt-out variable, that script creates a Windows Startup entry, macOS LaunchAgent, or Linux autostart entry. Each entry invokes kcgrouter in daemon mode at login. The daemon implementation launches the server detached through nohup or the Bun executable and writes a PID file. This is automatic persistence rather than an explicit user setup action.

Rationale

The package performs unconsented install-time operating-system persistence and starts a detached daemon on future logins. No installer exfiltration was found, but the concrete persistence behavior warrants blocking publication.

Evidence

package.jsonscripts/postinstall.mjssrc/cli/daemon.ts~/Library/LaunchAgents/com.kcgrouter.plist~/.config/autostart/kcgrouter.desktop%APPDATA%/Microsoft/Windows/Start Menu/Programs/Startup/kcgrouter-startup.vbs~/.kcgrouter/server.pid

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = bun scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = bun scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/server/providers/qoder/cosy.tsView file

50L51: function pkcs7Pad(data: Buffer, blockSize: number): Buffer { L52: const padding = blockSize - (data.length % blockSize); ... L57: L58: function aesEncryptCbcBase64(plaintext: string, keyStr: string): string { L59: const keyBytes = Buffer.from(keyStr, "utf8"); ... L125: * @param creds Credentials used for signing. L126: * @returns Header map ready to merge onto fetch(). L127: */

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/server/providers/qoder/cosy.tsView on unpkg · L50

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

6// because creating symlinks requires admin privileges / Developer Mode. L7: import { execSync } from "node:child_process"; L8: import { chmodSync, copyFileSync, existsSync, mkdirSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs"; ... L21: function resolveTraybin() { L22: let dir = process.cwd(); L23: for (;;) { ... L35: win32: { src: "tray_windows_release.exe", link: "tray_windows.exe" }, L36: }[process.platform]; L37: ... L64: const HOME = homedir(); L65: const KCGRouter_HOME = process.env.KCGRouter_HOME || join(HOME, ".kcgrouter"); L66: const isWin = process.platform === "win32";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/postinstall.mjsView on unpkg · L6

src/lib/startup.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/lib/startup.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/startup.tsView on unpkg

src/cli/daemon.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/cli/daemon.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/daemon.tsView on unpkg

src/cli/menu.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/cli/menu.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/menu.tsView on unpkg

src/db/client.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/db/client.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/db/client.tsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 37-77json

37 "LICENSE",

38 "!src/**/__tests__/**",

39 "!src/**/*.test.ts",

40 "!src/**/*.test.tsx",

41 "!src/test-setup.ts",

42 "!dist/**/*.map"

43 ],

44 "engines": {

45 "bun": ">=1.2.3"

46 },

47 "scripts": {

48 "dev": "KCGRouter_DEV=1 bun --hot src/index.ts",

49 "start": "NODE_ENV=production bun src/index.ts",

50 "build": "bun run build.ts",

51 "check": "biome check --write ./src",

52 "lint": "biome lint --write ./src",

53 "format": "biome format --write ./src",

54 "gen-env": "bash scripts/gen-env.sh",

55 "generate-icon": "bun scripts/generate-icon.ts",

56 "test": "bash scripts/test.sh",

57 "postinstall": "bun scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L57

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L57

58 "prepublishOnly": "bun run build"

59 },

60 "dependencies": {

61 "@clack/prompts": "^1.7.0",

62 "@radix-ui/react-label": "^2.1.7",

63 "@radix-ui/react-select": "^2.2.6",

64 "@radix-ui/react-slot": "^1.2.3",

65 "bun-plugin-tailwind": "^0.1.2",

66 "class-variance-authority": "^0.7.1",

67 "clsx": "^2.1.1",

68 "date-fns": "^4.4.0",

69 "jsonc-parser": "^3.3.1",

70 "lucide-react": "^1",

71 "radix-ui": "^1.6.7",

72 "react": "^19",

73 "react-day-picker": "^10.0.1",

74 "react-dom": "^19",

75 "recharts": "3.8.0",

76 "sonner": "^2.0.7",

77 "systray2": "^2.1.4",

src/server/providers/qoder/cosy.tsView file

Lines 30-70typescript

30 QODER_MACHINE_OS,

31 QODER_MACHINE_TYPE,

32 QODER_RSA_PUBLIC_KEY,

33} from "./constants";

34

35export interface CosyCreds {

36

scripts/postinstall.mjsView file

Lines 1-26javascript

1// Cross-platform postinstall: prepares systray2's native tray binaries and

2// registers kcgrouter to start automatically at user login.

3// On Unix it makes them executable and creates the platform symlinks that

4// systray2 looks for in debug mode. On Windows (where `chmod`/`ln` are not

5// available in bun's shell) it copies the binary instead of symlinking,

6// because creating symlinks requires admin privileges / Developer Mode.

7import { execSync } from "node:child_process";

8import { chmodSync, copyFileSync, existsSync, mkdirSync, symlinkSync, unlinkSync, writeFileSync }

src/lib/startup.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/lib/startup.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/startup.tsView on unpkg

src/cli/daemon.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/cli/daemon.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/daemon.tsView on unpkg

src/cli/menu.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/cli/menu.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/menu.tsView on unpkg

src/db/client.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/db/client.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/db/client.tsView on unpkg