magpie-opc-auth@0.1.2
magpie / OpenCode provider plugin for FiimeOPC (opc.fiime.cn): browser-cookie sign-in, Token wallet + daily quota card, daily check-in, and an OpenAI-compatible chat channel backed by the site's own API keys.
AI Security Review
scanned 4h ago · by lpm-firewall-aiSuccessful login automatically triggers eligible daily tasks, including public posting to a hard-coded community circle with the user's account. This is an unrequested account action toward a publisher-selected target, so the package should be blocked.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The user completes browser login; the callback starts afterLogin in the background.
Impact
Public posts may be made in the user's account without a separate request to publish them.
Mechanism
afterLogin runs the daily task runner with the authenticated cookie. Without a task filter, eligible tasks are considered; the plaza task posts generated text to a hard-coded circle.
Attack narrative
A successful browser login launches daily tasks in the background. When the service reports an eligible plaza-post task, the plugin creates a post from bundled/generated text and submits it with the user's cookie to a hard-coded check-in circle, without a separate user request to publish.
AI rationale
Successful login automatically triggers eligible daily tasks, including public posting to a hard-coded community circle with the user's account. This is an unrequested account action toward a publisher-selected target, so the package should be blocked.
Evidence
index.mjssrc/tasks.mjssrc/context.mjssrc/api.mjs
Network endpoints1
opc.fiime.cn/api/community/posts
Decision evidence
public snapshotAI called this Malicious at 95.0% confidence as Malware with low false-positive risk.
Evidence for block
- Successful browser login automatically starts background daily tasks using the account cookie.
- With no task filter configured, the task runner considers all tasks returned by the service.
- The plaza task publishes generated content to a hard-coded check-in circle through an authenticated POST.
Evidence against
- The package describes itself as a FiimeOPC provider with daily check-in functionality.
- The manifest declares no install lifecycle scripts.
- The plugin’s normal model and account requests target FiimeOPC, its stated service.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedscripts/check.mjsView file
174"type 是 module",
L175: "magpie 用 import() 加载，commonjs 会失败")
L176:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
scripts/check.mjsView on unpkg · L174extract-contract.pyView file
•path = extract-contract.py
kind = build_helper
sizeBytes = 1838
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
extract-contract.pyView on unpkgscripts/create.mjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
Findings
3 High5 Medium4 Low
HighSemantic Analysis Limitedscripts/create.mjs#virtual:normalized:round1
HighKnown Malware Source Similarityscripts/check-magpie-stable.mjs
HighAi Review Evidenceindex.mjs
MediumDynamic Requirescripts/check.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperextract-contract.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to magpie-opc-auth@0.1.2.
See all versions of magpie-opc-auth for other recorded verdicts.
- Avoid installing magpie-opc-auth@0.1.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.