registry / Credential exfiltration / nixamp / 0.50.1

nixamp@0.50.1

It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The browser’s normal management flow sends an existing Nixamp session token to account-listed server URLs without an origin allowlist, creating conditional credential exposure. The flow appears product-aligned and the package has no install hook, so this supports a warning rather than a block.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A signed-in user opens the browser management interface and it loads an account server.

Impact

A listed server outside the intended trust boundary could receive the session token. The inspected source does not establish malicious intent or misuse.

Mechanism

The interface retrieves the existing same-origin session token, reads server URLs from the account list, and uses the token as a bearer credential for requests to a listed server.

AI rationale

Evidence

web/dist/assets/radio-CDUEoM0y.jsdist/server.js

Network endpoints3

/api/v1/auth/token/api/v1/serversHTTP or HTTPS URLs from the account server list

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

A signed-in request to the token endpoint receives the caller’s existing session token.
The browser loads that token and the account’s server list, then attaches it to requests sent to a listed server URL.
The server list is scoped to the signed-in account, but the browser accepts HTTP or HTTPS URLs without an origin allowlist.
The package manifest has no install lifecycle hook.

Evidence against

The credential forwarding supports the package’s cross-server management flow, and destinations come from the account’s server list.
The manifest identifies a CLI entrypoint and no install lifecycle hook.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

Source & flagged code

7 flagged

dist/speech.jsView file

230try { L231: return (await import(__rewriteRelativeImportExtension(name))); L232: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/speech.jsView on unpkg · L230

dist/catalogs.jsView file

Lines 107-147javascript

107 return "Live TV";

108 return "";

109}

110/** `key="value"` pairs off an #EXTINF line. */

111function attributesOf(text) {

112 const found = {};

113 for (const match of text.matchAll(/([A-Za-z][\w-]*)="([^"]*)"/g)) {

114 found[match[1].toLowerCase()] = match[2];

115 }

116 return found;

117}

118/** Trim, flatten, and cut: these strings are written by whoever made the list. */

119function clean(value, max) {

120 return value.replace(/[-]/g, " ").trim().slice(0, max);

121}

122export function entryId(source) {

123 return createHash("sha1").update(source).digest("hex").slice(0, 12);

124}

125/**

126 * Parse an extended m3u: `#EXTINF:-1 tvg-name="CNN" group-title="News",CNN HD`

127 * decorates the URL on the next line, `#EXTGRP:News` names the group for

128 * lists that write it that way instead, and `#EXTIMG:https://...` is the

129 * picture for lists (a podcast's episodes, say) that carry one that way

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/catalogs.jsView on unpkg · L127

130 * rather than as a tvg-logo attribute.

131 */

132export function parseCatalog(text, base) {

133 const out = [];

134 const seen = new Set();

135 let duration = 0;

136 let title = "";

137 let group = "";

138 let logo = "";

139 let grp = "";

140 for (const raw of text.split(/\r?\n/)) {

141 const line = raw.trim();

142 if (line === "")

143 continue;

144 if (line.startsWith("#")) {

145 const info = /^#EXTINF:\s*(-?[\d.]+)\s*(.*)$/i.exec(line);

146 if (info) {

147 const seconds = Number(info[1]);

web/dist/assets/radio-CDUEoM0y.jsView file

Lines 1-1javascript

1import{n as e}from"./chunk-Q2XQMA4B-CDsJ8fBU.js";import{l as t}from"./remote-DJqvFdE6.js";var n=e=>document.querySelector(e);function r(e

dist/manage.jsView file

8*/ L9: import { spawnSync } from "node:child_process"; L10: import { existsSync, readFileSync } from "node:fs"; ... L12: import { fileURLToPath } from "node:url"; L13: const SITE = "https://nixamp.com"; L14: /** Windows has its own installer, its own shim and its own removal script. */ L15: const windows = process.platform === "win32"; L16: /** ... L21: export function installRoot(from = fileURLToPath(new URL(".", import.meta.url))) { L22: const declared = process.env["NIXAMP_HOME"]; L23: if (declared && existsSync(join(declared, "manifest.json"))) ... L42: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/manage.jsView on unpkg · L8

web/dist/install.shView file

•path = web/dist/install.sh kind = build_helper sizeBytes = 15393 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web/dist/install.shView on unpkg

dist/accounts.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 14

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/accounts.js#virtual:string-array:round1View on unpkg

dist/ai-label.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = nixamp@0.51.0 matchedIdentity = npm:bml4YW1w:0.51.0 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/ai-label.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/speech.jsView file

230try { L231: return (await import(__rewriteRelativeImportExtension(name))); L232: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/speech.jsView on unpkg · L230

dist/catalogs.jsView file

127* decorates the URL on the next line, `#EXTGRP:News` names the group for L128: * lists that write it that way instead, and `#EXTIMG:https://...` is the L129: * picture for lists (a podcast's episodes, say) that carry one that way ... L209: throw new Error(`${source} answered ${answer.status}`); L210: const text = await answer.text(); L211: if (text.length > maxBytes)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/catalogs.jsView on unpkg · L127

web/dist/assets/radio-CDUEoM0y.jsView file

Findings

1 Critical3 High5 Medium6 Low

CriticalHardcoded Runtime Data Exfiltrationweb/dist/assets/radio-CDUEoM0y.js

HighSandbox Evasion Gated Capabilitydist/manage.js

HighSemantic Analysis Limiteddist/accounts.js#virtual:string-array:round1

HighPrevious Version Dangerous Deltadist/ai-label.js

MediumDynamic Requiredist/speech.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperweb/dist/install.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowWeak Cryptodist/catalogs.js

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to nixamp@0.50.1.

See all versions of nixamp for other recorded verdicts.

Review the evidence and your use of nixamp@0.50.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 05:43:50.049Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.