magpie-trustoken-auth@0.3.7
Trustoken / AiPy for magpie — phone-code sign-in, the account's live model list, 灵石 balance, auto check-in and daily-task rewards. DeepSeek / Qwen / GLM / Doubao / Kimi / Hunyuan.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s default automatic check-in path can spend the user’s model quota by creating AiPy tasks or sending fallback model requests with the user’s keys. Because this is automatic resource spending, the package meets the malicious verdict rule despite the behavior being tied to its stated daily-rewards feature.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Magpie’s automatic check-in, enabled by default in the package metadata, invokes the check-in hook when a daily task has remaining progress.
Impact
The user’s available model quota may be consumed automatically while the plugin attempts to complete daily reward tasks.
Mechanism
The hook reads the AiPy local API key and uses it to create tasks with the cheapest model. If task creation is unavailable, it sends model requests using the account API key.
Attack narrative
With automatic check-in enabled by default, the hook checks for unfinished daily tasks and tries to complete them. It creates AiPy tasks using a locally read API key, or sends fallback model requests with the account API key. These requests can consume the user’s quota without a separate confirmation for model use.
AI rationale
The package’s default automatic check-in path can spend the user’s model quota by creating AiPy tasks or sending fallback model requests with the user’s keys. Because this is automatic resource spending, the package meets the malicious verdict rule despite the behavior being tied to its stated daily-rewards feature.
Evidence
package.jsonsrc/hooks/checkin.mjssrc/aipy-local.mjs
Network endpoints2
127.0.0.1:<port>/api/aipy/createTaskapi.trustoken.cn/v1
Decision evidence
public snapshotAI called this Malicious at 91.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package sets `magpie.autoCheckin` to true, enabling automatic check-in by default.
- When check-in finds unfinished daily tasks, it creates AiPy tasks using the cheapest model; if that path is unavailable, it sends chat requests with the account API key.
- The task-creation helper reads AiPy’s local API key and sends it to AiPy’s local task endpoint. Creating those model tasks can consume the user’s quota.
Evidence against
- The package describes itself as a Trustoken/AiPy sign-in and daily-rewards plugin; check-in and task completion serve that purpose.
- The entry point assembles hooks without performing account actions at import time.
- The OAuth flow sends the session cookie to the Trustoken service during the user-started login flow; no unrelated credential destination was identified.
- The manifest has no install or lifecycle scripts.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
11 flaggedscripts/score.mjsView file
15import { join, resolve } from "node:path"
L16: import { spawnSync } from "node:child_process"
L17:
High
•matchType = normalized_sha256
matchedPackage = magpie-trustoken-auth@0.3.20
matchedPath = scripts/score.mjs
matchedIdentity = npm:bWFncGllLXRydXN0b2tlbi1hdXRo:0.3.20
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/score.mjsView on unpkgscripts/check.mjsView file
•matchType = normalized_sha256
matchedPackage = magpie-trustoken-auth@0.3.20
matchedPath = scripts/check.mjs
matchedIdentity = npm:bWFncGllLXRydXN0b2tlbi1hdXRo:0.3.20
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
11 High4 Medium4 Low
HighChild Processscripts/score.mjs
HighShell
HighSame File Env Network Executionsrc/aipy-local.mjs
HighSandbox Evasion Gated Capabilitysrc/hooks/methods.mjs
HighKnown Malware Source Similaritysrc/aipy-local.mjs
HighKnown Malware Source Similaritysrc/browser-login.mjs
HighKnown Malware Source Similarityscripts/release.mjs
HighKnown Malware Source Similarityscripts/check-magpie-stable.mjs
HighKnown Malware Source Similarityscripts/check.mjs
HighKnown Malware Source Similarityscripts/score.mjs
HighPrevious Version Dangerous Deltasrc/hooks/methods.mjs
MediumDynamic Require
Affected versions and remediation
This report applies to magpie-trustoken-auth@0.3.7.
See all versions of magpie-trustoken-auth for other recorded verdicts.
- Avoid installing magpie-trustoken-auth@0.3.7. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.