registry / nixamp / 0.71.0

nixamp@0.71.0

⚠ Under review

It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.

AI Security Review

scanned 13h ago · by lpm-firewall-ai

The flagged browser code’s token forwarding is consistent with managing servers registered to the signed-in user, and the inspected sources do not establish exfiltration to a fixed package-controlled receiver. Several selected registry dependencies are unavailable for source review, so their runtime behavior remains unresolved and requires manual review.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Running package functionality that loads the modules importing those dependencies.

Impact

Their behavior cannot be assessed from this snapshot, so the package cannot be cleared.

Mechanism

The package imports notification, settings synchronization, payment gateway, and ACME client dependencies whose source was not available for inspection.

AI rationale

Evidence

package.jsondist/notify.jsdist/settings-sync.jsdist/paywall.jsdist/certs.jsweb/dist/assets/radio-DmVc3wpH.jssrc/session.tssrc/server.tssrc/servers.ts

Decision evidence

public snapshot

AI called this Manual Review at 82.0% confidence as Unknown with medium false-positive risk.

AI review observations

The flagged browser bundle reads the signed-in nixamp token and uses it for servers in the account’s server list; the package source describes those as the user’s own machines.
The user can register a server URL through an explicit CLI command, and the server list is scoped to the signed-in account.
The package imports several selected registry dependencies whose source was unavailable in the supplied snapshot, so their runtime behavior remains unresolved.

Evidence against

The inspected browser code does not establish that the token is sent to a fixed package-controlled receiver; it uses account-listed server URLs.
The package manifest has no install lifecycle hook, and the CLI entry imports the application’s main module.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStrings

Source & flagged code

20 flagged

dist/links.jsView file

22import { createHash } from "node:crypto"; L23: import { spawn } from "node:child_process"; L24: import { parseCatalog } from "./catalogs.js";

High

Child Process

Package source references child process execution.

dist/links.jsView on unpkg · L22

dist/speech.jsView file

230try { L231: return (await import(__rewriteRelativeImportExtension(name))); L232: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/speech.jsView on unpkg · L230

dist/catalogs.jsView file

127* decorates the URL on the next line, `#EXTGRP:News` names the group for L128: * lists that write it that way instead, and `#EXTIMG:https://...` is the L129: * picture for lists (a podcast's episodes, say) that carry one that way ... L209: throw new Error(`${source} answered ${answer.status}`); L210: const text = await answer.text(); L211: if (text.length > maxBytes)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/catalogs.jsView on unpkg · L127

web/dist/assets/radio-DmVc3wpH.jsView file

1import"./modulepreload-polyfill-P2Xu9kJm.js";import{n as e}from"./chunk-Q2XQMA4B-BaoaSqsD.js";import{l as t}from"./remote-DJqvFdE6.js";var n=e=>document.querySelector(e);function r...

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

web/dist/assets/radio-DmVc3wpH.jsView on unpkg · L1

dist/server.jsView file

8* commands a remote sends. State is pushed over Server-Sent Events rather than L9: * a WebSocket because SSE is plain HTTP: no dependency, and it reconnects on L10: * its own when the laptop running the remote goes to sleep. ... L18: import { hostname } from "node:os"; L19: import { spawn, spawnSync } from "node:child_process"; L20: import { readFileSync } from "node:fs"; ... L174: // A platform that hands out the port does it through PORT; a flag still wins. L175: const fromEnv = Number(process.env.PORT); L176: const options = { ... L869: response.writeHead(refused.status, headers); L870: response.end(Buffer.from(await refused.arrayBuffer())); L871: }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/server.jsView on unpkg · L8

dist/manage.jsView file

8*/ L9: import { spawnSync } from "node:child_process"; L10: import { existsSync, readFileSync } from "node:fs"; ... L12: import { fileURLToPath } from "node:url"; L13: const SITE = "https://nixamp.com"; L14: /** Windows has its own installer, its own shim and its own removal script. */ L15: const windows = process.platform === "win32"; L16: /** ... L21: export function installRoot(from = fileURLToPath(new URL(".", import.meta.url))) { L22: const declared = process.env["NIXAMP_HOME"]; L23: if (declared && existsSync(join(declared, "manifest.json"))) ... L42: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/manage.jsView on unpkg · L8

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/manage.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/manage.jsView on unpkg

web/dist/install.shView file

•path = web/dist/install.sh kind = build_helper sizeBytes = 15393 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web/dist/install.shView on unpkg

dist/accounts.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 14

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/accounts.js#virtual:string-array:round1View on unpkg

dist/ai-radio.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/ai-radio.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/ai-radio.jsView on unpkg

dist/session.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/session.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/session.jsView on unpkg

src/ai-radio.tsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = src/ai-radio.ts matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/ai-radio.tsView on unpkg

src/session.tsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = src/session.ts matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/session.tsView on unpkg

dist/daemon.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/daemon.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon.jsView on unpkg

src/daemon.tsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = src/daemon.ts matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/daemon.tsView on unpkg

src/manage.tsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = src/manage.ts matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/manage.tsView on unpkg

dist/channels.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/channels.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/channels.jsView on unpkg

dist/guide-rooms.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/guide-rooms.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/guide-rooms.jsView on unpkg

dist/jingle.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/jingle.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/jingle.jsView on unpkg

dist/lyrics.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/lyrics.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lyrics.jsView on unpkg

Source & flagged code

20 flagged · loading source

dist/links.jsView file

22import { createHash } from "node:crypto"; L23: import { spawn } from "node:child_process"; L24: import { parseCatalog } from "./catalogs.js";

High

Child Process

Package source references child process execution.

dist/links.jsView on unpkg · L22

dist/speech.jsView file

230try { L231: return (await import(__rewriteRelativeImportExtension(name))); L232: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/speech.jsView on unpkg · L230

dist/catalogs.jsView file

Findings

1 Critical16 High5 Medium6 Low

CriticalHardcoded Runtime Data Exfiltrationweb/dist/assets/radio-DmVc3wpH.js

HighChild Processdist/links.js

HighCommand Output Exfiltrationdist/server.js

HighSandbox Evasion Gated Capabilitydist/manage.js

HighSemantic Analysis Limiteddist/accounts.js#virtual:string-array:round1

HighKnown Malware Source Similaritydist/ai-radio.js

HighKnown Malware Source Similaritydist/session.js

HighKnown Malware Source Similaritysrc/ai-radio.ts

HighKnown Malware Source Similaritysrc/session.ts

HighKnown Malware Source Similaritydist/daemon.js

HighKnown Malware Source Similaritydist/manage.js

Affected versions and remediation

This report applies to nixamp@0.71.0.

See all versions of nixamp for other recorded verdicts.

Review the evidence and your use of nixamp@0.71.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 14:53:03.044Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.