Loading npm security reports…

kcgrouter@0.14.0: Malicious npm security report (Block) | LPM Firewall

registry / kcgrouter / 0.14.0

kcgrouter@0.14.0

Lightweight AI proxy gateway — route chat completions to upstream providers

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing the package automatically creates login-startup persistence for the package daemon. It affects Windows, macOS, and Linux unless the installer environment already sets an opt-out variable.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

The package can start persistently in the user session without an explicit setup command.

Mechanism

Automatic OS login-startup registration and hidden daemon launch.

Attack narrative

The package's postinstall hook runs automatically during installation. Unless the installer pre-sets KCGRouter_SKIP_STARTUP, it creates a Windows Startup-folder launcher, a macOS LaunchAgent, or a Linux XDG autostart entry. Those entries launch the package daemon at user login; the Windows launcher is configured to run hidden. This is unconsented persistence established by an install hook, even though the reviewed hook does not itself send network traffic or collect credentials.

Rationale

The automatic postinstall hook persists a background package daemon across logins without an explicit user command. This is concrete install-hook persistence and warrants blocking despite the absence of confirmed credential exfiltration.

Evidence

package.jsonscripts/postinstall.mjs~/.kcgrouter/scripts/kcgrouter-startup.vbs%APPDATA%/Microsoft/Windows/Start Menu/Programs/Startup/kcgrouter-startup.vbs~/Library/LaunchAgents/com.kcgrouter.plist~/.config/autostart/kcgrouter.desktop

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = bun scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = bun scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/server/providers/qoder/cosy.tsView file

50L51: function pkcs7Pad(data: Buffer, blockSize: number): Buffer { L52: const padding = blockSize - (data.length % blockSize); ... L57: L58: function aesEncryptCbcBase64(plaintext: string, keyStr: string): string { L59: const keyBytes = Buffer.from(keyStr, "utf8"); ... L125: * @param creds Credentials used for signing. L126: * @returns Header map ready to merge onto fetch(). L127: */

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/server/providers/qoder/cosy.tsView on unpkg · L50

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

6// because creating symlinks requires admin privileges / Developer Mode. L7: import { execSync } from "node:child_process"; L8: import { chmodSync, copyFileSync, existsSync, mkdirSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs"; ... L21: function resolveTraybin() { L22: let dir = process.cwd(); L23: for (;;) { ... L35: win32: { src: "tray_windows_release.exe", link: "tray_windows.exe" }, L36: }[process.platform]; L37: ... L64: const HOME = homedir(); L65: const KCGRouter_HOME = process.env.KCGRouter_HOME || join(HOME, ".kcgrouter"); L66: const isWin = process.platform === "win32";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/postinstall.mjsView on unpkg · L6

src/lib/startup.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/lib/startup.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/startup.tsView on unpkg

src/cli/daemon.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/cli/daemon.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/daemon.tsView on unpkg

src/cli/menu.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/cli/menu.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/menu.tsView on unpkg

src/db/client.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/db/client.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/db/client.tsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 37-77json

37 "LICENSE",

38 "!src/**/__tests__/**",

39 "!src/**/*.test.ts",

40 "!src/**/*.test.tsx",

41 "!src/test-setup.ts",

42 "!dist/**/*.map"

43 ],

44 "engines": {

45 "bun": ">=1.2.3"

46 },

47 "scripts": {

48 "dev": "KCGRouter_DEV=1 bun --hot src/index.ts",

49 "start": "NODE_ENV=production bun src/index.ts",

50 "build": "bun run build.ts",

51 "check": "biome check --write ./src",

52 "lint": "biome lint --write ./src",

53 "format": "biome format --write ./src",

54 "gen-env": "bash scripts/gen-env.sh",

55 "generate-icon": "bun scripts/generate-icon.ts",

56 "test": "bash scripts/test.sh",

57 "postinstall": "bun scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L57

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L57

58 "prepublishOnly": "bun run build"

59 },

60 "dependencies": {

61 "@clack/prompts": "^1.7.0",

62 "@radix-ui/react-label": "^2.1.7",

63 "@radix-ui/react-select": "^2.2.6",

64 "@radix-ui/react-slot": "^1.2.3",

65 "bun-plugin-tailwind": "^0.1.2",

66 "class-variance-authority": "^0.7.1",

67 "clsx": "^2.1.1",

68 "date-fns": "^4.4.0",

69 "jsonc-parser": "^3.3.1",

70 "lucide-react": "^1",

71 "radix-ui": "^1.6.7",

72 "react": "^19",

73 "react-day-picker": "^10.0.1",

74 "react-dom": "^19",

75 "recharts": "3.8.0",

76 "sonner": "^2.0.7",

77 "systray2": "^2.1.4",

src/server/providers/qoder/cosy.tsView file

Lines 30-70typescript

30 QODER_MACHINE_OS,

31 QODER_MACHINE_TYPE,

32 QODER_RSA_PUBLIC_KEY,

33} from "./constants";

34

35export interface CosyCreds {

36

scripts/postinstall.mjsView file

Lines 1-26javascript

1// Cross-platform postinstall: prepares systray2's native tray binaries and

2// registers kcgrouter to start automatically at user login.

3// On Unix it makes them executable and creates the platform symlinks that

4// systray2 looks for in debug mode. On Windows (where `chmod`/`ln` are not

5// available in bun's shell) it copies the binary instead of symlinking,

6// because creating symlinks requires admin privileges / Developer Mode.

7import { execSync } from "node:child_process";

8import { chmodSync, copyFileSync, existsSync, mkdirSync, symlinkSync, unlinkSync, writeFileSync }

src/lib/startup.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/lib/startup.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/startup.tsView on unpkg

src/cli/daemon.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/cli/daemon.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/daemon.tsView on unpkg

src/cli/menu.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/cli/menu.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/menu.tsView on unpkg

src/db/client.tsView file

•matchType = normalized_sha256 matchedPackage = kcgrouter@0.11.1 matchedPath = src/db/client.ts matchedIdentity = npm:a2Nncm91dGVy:0.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/db/client.tsView on unpkg