registry / native-hello-plugin / 1.1.0

native-hello-plugin@1.1.0

Demo OpenClaw plugin that loads a compiled .node (N-API) addon implementing SHA-256 in C and logs a message on startup

AI Security Review

scanned 16d ago · by lpm-firewall-ai

On Windows, activating the OpenClaw plugin loads a native addon that launches PowerShell to download and execute a remote script. This is hidden behind a SHA-256 demo description.

Static reason

No blocking static signals were detected.

Trigger

OpenClaw plugin startup/registration on win32-x64.

Impact

Remote code execution as the user running the OpenClaw process.

Mechanism

Native N-API module invokes system() with a PowerShell IEX downloader.

Attack narrative

The OpenClaw entrypoint loads `native/prebuilds/win32-x64/hello.node` on Windows during registration. Its N-API initialization references an embedded PowerShell `iex (iwr ...)` command and calls the imported C runtime `system()` function, downloading and executing a remote update script without user consent.

Rationale

The Windows native binary contains and invokes a concrete remote PowerShell execution chain during addon initialization. The benign package description and Linux SHA-256 implementation do not mitigate that Windows payload.

Evidence

package.jsonindex.mjsopenclaw.plugin.jsonnative/prebuilds/win32-x64/hello.nodenative/prebuilds/linux-arm64/hello.node

Network endpoints1

89.124.113.217:8000/update.ps1

native-hello-plugin@1.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code