nixamp@0.69.0
It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe page forwards a Nixamp session token to account-listed remote servers, and its initial selection can be automatic. This supports a credential-exposure warning, but the inspected source does not establish a fixed unrelated recipient or a concrete attack warranting a block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Opening the radio management page while signed in with one or more remote servers listed.
Impact
A listed server can receive the user's Nixamp token, exposing it beyond the service that issued it.
Mechanism
The page fetches a same-origin authentication token, builds its server choices from the account's server list, and attaches the token to API requests for a remote choice.
AI rationale
The page forwards a Nixamp session token to account-listed remote servers, and its initial selection can be automatic. This supports a credential-exposure warning, but the inspected source does not establish a fixed unrelated recipient or a concrete attack warranting a block.
Evidence
web/dist/assets/radio-DmVc3wpH.js
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The radio page retrieves a signed-in Nixamp token from its same-origin authentication endpoint.
- It takes server URLs from the account's server list and uses those URLs as remote API destinations.
- The page selects the previously saved server or defaults to the first listed server, then connects automatically.
- For remote destinations, API requests include the retrieved token as a bearer authorization value.
- The package manifest shows application scripts and no install lifecycle hook.
Evidence against
- The credential is forwarded by the radio management page to a server listed in the user's Nixamp account; the inspected code does not establish a fixed publisher-controlled recipient or credential theft.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
20 flagged · loading sourcedist/links.jsView file
22import { createHash } from "node:crypto";
L23: import { spawn } from "node:child_process";
L24: import { parseCatalog } from "./catalogs.js";
High
dist/speech.jsView file
230try {
L231: return (await import(__rewriteRelativeImportExtension(name)));
L232: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/speech.jsView on unpkg · L230dist/catalogs.jsView file
127* decorates the URL on the next line, `#EXTGRP:News` names the group for
L128: * lists that write it that way instead, and `#EXTIMG:https://...` is the
L129: * picture for lists (a podcast's episodes, say) that carry one that way
...
L209: throw new Error(`${source} answered ${answer.status}`);
L210: const text = await answer.text();
L211: if (text.length > maxBytes)
Findings
1 Critical16 High5 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationweb/dist/assets/radio-DmVc3wpH.js
HighChild Processdist/links.js
HighCommand Output Exfiltrationdist/server.js
HighSandbox Evasion Gated Capabilitydist/manage.js
HighSemantic Analysis Limiteddist/accounts.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/ai-radio.js
HighKnown Malware Source Similaritydist/session.js
HighKnown Malware Source Similaritysrc/ai-radio.ts
HighKnown Malware Source Similaritysrc/session.ts
HighKnown Malware Source Similaritydist/daemon.js
HighKnown Malware Source Similaritydist/manage.js
Affected versions and remediation
This report applies to nixamp@0.69.0.
See all versions of nixamp for other recorded verdicts.
- Review the evidence and your use of nixamp@0.69.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.