nixamp@0.53.4
It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe radio forwards an existing Nixamp session token to account-listed remote server URLs without an evident host allowlist. This is conditional credential exposure, so the appropriate result is a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
An authenticated user opens the radio with a remote server listed in the account.
Impact
A listed server outside the intended service could receive the account token, creating conditional credential exposure.
Mechanism
The bundle obtains a same-origin token, uses account-listed server URLs as API bases, and attaches the token as a Bearer credential to requests to those bases.
AI rationale
The radio forwards an existing Nixamp session token to account-listed remote server URLs without an evident host allowlist. This is conditional credential exposure, so the appropriate result is a warning rather than a block.
Evidence
web/dist/assets/radio-ZiViiR-a.jsweb/dist/assets/remote-DJqvFdE6.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The radio bundle retrieves a token using same-origin credentials, then loads server URLs from the authenticated account’s server list.
- For a configured remote base, API requests include the retrieved token as a Bearer credential and omit same-origin cookies.
- The remote URL parser accepts HTTP or HTTPS URLs and returns their origin as the request base; no host allowlist is visible in the inspected code.
Evidence against
- The transfer is limited to remote server URLs listed by the account; the inspected source does not show a fixed publisher-controlled recipient.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcedist/speech.jsView file
230try {
L231: return (await import(__rewriteRelativeImportExtension(name)));
L232: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/speech.jsView on unpkg · L230dist/catalogs.jsView file
127* decorates the URL on the next line, `#EXTGRP:News` names the group for
L128: * lists that write it that way instead, and `#EXTIMG:https://...` is the
L129: * picture for lists (a podcast's episodes, say) that carry one that way
...
L209: throw new Error(`${source} answered ${answer.status}`);
L210: const text = await answer.text();
L211: if (text.length > maxBytes)
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/catalogs.jsView on unpkg · L127web/dist/assets/radio-ZiViiR-a.jsView file
Findings
1 Critical2 High5 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationweb/dist/assets/radio-ZiViiR-a.js
HighSandbox Evasion Gated Capabilitydist/manage.js
HighSemantic Analysis Limiteddist/accounts.js#virtual:string-array:round1
MediumDynamic Requiredist/speech.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperweb/dist/install.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowWeak Cryptodist/catalogs.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to nixamp@0.53.4.
See all versions of nixamp for other recorded verdicts.
- Review the evidence and your use of nixamp@0.53.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.