nixamp@0.67.0
It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe runtime forwards an existing session token to dynamically listed cross-origin servers without an evident recipient-specific confirmation or destination allowlist. This is a real credential exposure risk, but the source does not establish malicious intent or a fixed attacker-controlled recipient, so a warning is appropriate.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Opening the radio interface while signed in and loading an available server.
Impact
A listed cross-origin server may receive the session token; the inspected source does not establish that every listed destination is a trusted nixamp service.
Mechanism
The interface fetches a token from its same-origin authentication endpoint, assigns it to a server entry, then adds it as a bearer token on requests to that entry’s base URL.
AI rationale
The runtime forwards an existing session token to dynamically listed cross-origin servers without an evident recipient-specific confirmation or destination allowlist. This is a real credential exposure risk, but the source does not establish malicious intent or a fixed attacker-controlled recipient, so a warning is appropriate.
Evidence
web/dist/assets/radio-DmVc3wpH.js
Decision evidence
public snapshotAI called this Suspicious at 85.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The browser code retrieves a session token from its same-origin authentication endpoint.
- It adds the token to requests sent to server URLs returned by the account’s server list, including cross-origin URLs.
- When servers are available, the code selects the saved server or defaults to the first returned server.
Evidence against
- This forwarding appears in the browser interface’s multi-server management flow; the inspected code does not show a package-selected fixed recipient or prove malicious use.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
20 flagged · loading sourcedist/links.jsView file
22import { createHash } from "node:crypto";
L23: import { spawn } from "node:child_process";
L24: import { parseCatalog } from "./catalogs.js";
High
dist/speech.jsView file
230try {
L231: return (await import(__rewriteRelativeImportExtension(name)));
L232: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/speech.jsView on unpkg · L230dist/catalogs.jsView file
127* decorates the URL on the next line, `#EXTGRP:News` names the group for
L128: * lists that write it that way instead, and `#EXTIMG:https://...` is the
L129: * picture for lists (a podcast's episodes, say) that carry one that way
...
L209: throw new Error(`${source} answered ${answer.status}`);
L210: const text = await answer.text();
L211: if (text.length > maxBytes)
Findings
1 Critical16 High5 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationweb/dist/assets/radio-DmVc3wpH.js
HighChild Processdist/links.js
HighCommand Output Exfiltrationdist/server.js
HighSandbox Evasion Gated Capabilitydist/manage.js
HighSemantic Analysis Limiteddist/accounts.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/ai-radio.js
HighKnown Malware Source Similaritydist/session.js
HighKnown Malware Source Similaritysrc/ai-radio.ts
HighKnown Malware Source Similaritysrc/session.ts
HighKnown Malware Source Similaritydist/daemon.js
HighKnown Malware Source Similaritydist/manage.js
Affected versions and remediation
This report applies to nixamp@0.67.0.
See all versions of nixamp for other recorded verdicts.
- Review the evidence and your use of nixamp@0.67.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.