nixamp@0.63.0
It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe inspected browser code sends a reusable account session token to a remote origin selected from the user’s saved server list, with no recipient allowlist or token restriction. That supports a warning for conditional credential exposure; the source does not establish malicious intent or covert theft.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Opening the radio page with a saved server selected triggers a connection to that server.
Impact
The remote server receives a reusable account session token, which could expose the account if the recipient is untrusted or compromised.
Mechanism
The client obtains the current session token and uses it as a bearer token for requests to the saved server origin. The inspected code accepts arbitrary HTTP or HTTPS origins and shows no recipient-specific confirmation or token restriction.
AI rationale
The inspected browser code sends a reusable account session token to a remote origin selected from the user’s saved server list, with no recipient allowlist or token restriction. That supports a warning for conditional credential exposure; the source does not establish malicious intent or covert theft.
Evidence
web/dist/assets/radio-DmVc3wpH.jssrc/server.tssrc/servers.ts
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The authenticated token endpoint returns the caller’s existing Nixamp session token.
- The radio client retrieves that token from its current origin and attaches it as a bearer token to requests sent to the selected server origin.
- The recipient comes from the signed-in user’s saved server list, but the client forwards the same session token to that remote server.
- Saved server URLs are accepted from any HTTP or HTTPS origin, without a token-scoping or recipient-confirmation check in the inspected code.
- On page initialization, the client selects a saved server and immediately connects to it.
Evidence against
- The saved server list is scoped to the signed-in user’s account and is used for the product’s remote-server management feature.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
20 flagged · loading sourcedist/links.jsView file
22import { createHash } from "node:crypto";
L23: import { spawn } from "node:child_process";
L24: import { parseCatalog } from "./catalogs.js";
High
dist/speech.jsView file
230try {
L231: return (await import(__rewriteRelativeImportExtension(name)));
L232: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/speech.jsView on unpkg · L230dist/catalogs.jsView file
127* decorates the URL on the next line, `#EXTGRP:News` names the group for
L128: * lists that write it that way instead, and `#EXTIMG:https://...` is the
L129: * picture for lists (a podcast's episodes, say) that carry one that way
...
L209: throw new Error(`${source} answered ${answer.status}`);
L210: const text = await answer.text();
L211: if (text.length > maxBytes)
Findings
1 Critical16 High5 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationweb/dist/assets/radio-DmVc3wpH.js
HighChild Processdist/links.js
HighCommand Output Exfiltrationdist/server.js
HighSandbox Evasion Gated Capabilitydist/manage.js
HighSemantic Analysis Limiteddist/accounts.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/ai-radio.js
HighKnown Malware Source Similaritydist/session.js
HighKnown Malware Source Similaritysrc/ai-radio.ts
HighKnown Malware Source Similaritysrc/session.ts
HighKnown Malware Source Similaritydist/daemon.js
HighKnown Malware Source Similaritydist/manage.js
Affected versions and remediation
This report applies to nixamp@0.63.0.
See all versions of nixamp for other recorded verdicts.
- Review the evidence and your use of nixamp@0.63.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.