magpie-trustoken-auth
Trustoken / AiPy for magpie — phone-code sign-in, the account's live model list, 灵石 balance, auto check-in and daily-task rewards. DeepSeek / Qwen / GLM / Doubao / Kimi / Hunyuan.
This report shows the evidence for magpie-trustoken-auth@0.4.0. 18 of 21 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package automatically uses the user's service key and quota to generate task-shaped requests and claim rewards during default check-in. This is concrete unauthorized automated use of the user's account resources, so the package should be blocked.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Magpie invokes the registered check-in hook while auto-check-in is enabled by default and the account has incomplete daily tasks.
Impact
Unrequested use of the user's service key and quota, with automated daily-task reward claims.
Mechanism
The hook sends repeated chat-completion requests using the account API key and task-shaped headers, then claims tasks marked claimable.
Attack narrative
With auto-check-in enabled by default, the plugin detects incomplete daily tasks, spends the account's Trustoken API quota on repeated task-shaped chat requests, and claims rewards when tasks become claimable. The requests target Trustoken itself, but the automatic quota use and reward farming occur without an explicit request for each action.
AI rationale
The package automatically uses the user's service key and quota to generate task-shaped requests and claim rewards during default check-in. This is concrete unauthorized automated use of the user's account resources, so the package should be blocked.
Evidence
package.jsonindex.mjssrc/hooks/checkin.mjssrc/aipy-remote.mjs
Network endpoints2
api.trustoken.cn/v1/chat/completionswww.trustoken.cn
Decision evidence
public snapshotAI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package enables Magpie auto-check-in by default and exposes the check-in hook.
- When daily task gaps exist, check-in uses the account API key to issue repeated remote AI requests.
- Those requests send the API key as a Bearer credential to api.trustoken.cn.
- The hook automatically claims rewards for tasks marked claimable.
Evidence against
- The requests go to Trustoken, the service this provider serves; no unrelated credential destination was identified.
- The package describes auto-check-in and daily-task rewards as features.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
11 flaggedscripts/score.mjsView file
15import { join, resolve } from "node:path"
L16: import { spawnSync } from "node:child_process"
L17:
High
•matchType = normalized_sha256
matchedPackage = magpie-trustoken-auth@0.3.23
matchedPath = scripts/score.mjs
matchedIdentity = npm:bWFncGllLXRydXN0b2tlbi1hdXRo:0.3.23
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/score.mjsView on unpkgscripts/check.mjsView file
•matchType = normalized_sha256
matchedPackage = magpie-trustoken-auth@0.3.23
matchedPath = scripts/check.mjs
matchedIdentity = npm:bWFncGllLXRydXN0b2tlbi1hdXRo:0.3.23
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
11 High4 Medium4 Low
HighChild Processscripts/score.mjs
HighShell
HighSame File Env Network Executionsrc/aipy-local.mjs
HighSandbox Evasion Gated Capabilitysrc/hooks/methods.mjs
HighKnown Malware Source Similaritysrc/browser-login.mjs
HighKnown Malware Source Similarityscripts/release.mjs
HighKnown Malware Source Similarityscripts/check-magpie-stable.mjs
HighKnown Malware Source Similarityscripts/check.mjs
HighKnown Malware Source Similarityscripts/score.mjs
HighKnown Malware Source Similaritysrc/hooks/methods.mjs
HighPrevious Version Dangerous Deltasrc/aipy-local.mjs
MediumDynamic Require
Affected versions and remediation
This report applies to magpie-trustoken-auth@0.4.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing magpie-trustoken-auth@0.4.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.