nixamp@0.66.3
It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe browser forwards an existing nixamp session token to remote account-configured server URLs without recipient-specific confirmation. This is a credential exposure risk, but the inspected source does not establish a package-selected unrelated recipient or another concrete attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The browser app loads while signed in and makes a request to a selected remote server.
Impact
A configured remote server can receive the nixamp session token and may be able to use the account session.
Mechanism
It retrieves the session token from the same-origin auth endpoint, uses account server URLs as remote targets, and adds the token as a bearer credential to remote requests.
AI rationale
The browser forwards an existing nixamp session token to remote account-configured server URLs without recipient-specific confirmation. This is a credential exposure risk, but the inspected source does not establish a package-selected unrelated recipient or another concrete attack.
Evidence
web/dist/assets/radio-DmVc3wpH.jsdist/server.js
Network endpoints2
nixamp.com same-origin auth and server-list APIsAccount-configured HTTP(S) server URLs
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The browser retrieves a signed-in session token from the same-origin auth endpoint, and the server endpoint returns that token to authenticated callers.
- The browser builds remote targets from URLs in the account’s server list; the server lets signed-in users add server URLs.
- Requests to a remote target use the session token as a bearer credential, without a recipient-specific confirmation step.
- The credential is sent to account-configured servers, so the source establishes conditional exposure but not a package-selected recipient.
Evidence against
- The transfer is limited to server URLs in the signed-in account’s server list; the inspected source does not show a hardcoded unrelated recipient.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
20 flagged · loading sourcedist/links.jsView file
22import { createHash } from "node:crypto";
L23: import { spawn } from "node:child_process";
L24: import { parseCatalog } from "./catalogs.js";
High
dist/speech.jsView file
230try {
L231: return (await import(__rewriteRelativeImportExtension(name)));
L232: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/speech.jsView on unpkg · L230dist/catalogs.jsView file
127* decorates the URL on the next line, `#EXTGRP:News` names the group for
L128: * lists that write it that way instead, and `#EXTIMG:https://...` is the
L129: * picture for lists (a podcast's episodes, say) that carry one that way
...
L209: throw new Error(`${source} answered ${answer.status}`);
L210: const text = await answer.text();
L211: if (text.length > maxBytes)
Findings
1 Critical16 High5 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationweb/dist/assets/radio-DmVc3wpH.js
HighChild Processdist/links.js
HighCommand Output Exfiltrationdist/server.js
HighSandbox Evasion Gated Capabilitydist/manage.js
HighSemantic Analysis Limiteddist/accounts.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/ai-radio.js
HighKnown Malware Source Similaritydist/session.js
HighKnown Malware Source Similaritysrc/ai-radio.ts
HighKnown Malware Source Similaritysrc/session.ts
HighKnown Malware Source Similaritydist/daemon.js
HighKnown Malware Source Similaritydist/manage.js
Affected versions and remediation
This report applies to nixamp@0.66.3.
See all versions of nixamp for other recorded verdicts.
- Review the evidence and your use of nixamp@0.66.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.