registry / Credential exfiltration / nixamp / 0.72.1

nixamp@0.72.1

It really whips the terminal's ass. A Winamp-shaped audio player for your terminal.

AI Security Review

scanned 6h ago · by lpm-firewall-ai

The browser forwards an existing account token to an account-registered remote endpoint without enforcing a destination allowlist. The account server list and explicit server selection suggest intended multi-server functionality, so this supports a warning for conditional credential exposure rather than a block.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

The user opens the radio management page while signed in and selects a registered remote server.

Impact

A server at a registered destination can receive the account token and may be able to use it beyond the current site.

Mechanism

The page retrieves the current site’s account token, associates it with URLs returned by the account server list, and sends it in bearer authorization headers to remote requests without an origin allowlist.

AI rationale

Evidence

web/dist/assets/radio-dUHZb5wV.js

Network endpoints2

/api/v1/auth/token/api/v1/servers

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The browser obtains a signed-in token from the current site and loads server URLs associated with the account.
It attaches that token as a bearer credential to requests sent to a selected remote server, with no destination allowlist in the request helper.

Evidence against

The remote URLs come from the signed-in account’s server list, and the browser exposes a server selector; this supports an intended multi-server feature, though it does not establish that each recipient is trusted.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 468 file(s), 9.57 MB of source, external domains: 127.0.0.1, accounts.google.com, acme-v02.api.letsencrypt.org, amzn.to, aomedia.org, api.anthropic.com, api.cloudflare.com, api.elevenlabs.io, api.github.com, api.openai.com, api.porkbun.com, api.resend.com, api.telnyx.com, backtoschool.help, bittorrented.com, coinpayportal.com, crawlproof.com, example.com, generativelanguage.googleapis.com, github.com, ipinfo.io, iptv-org.github.io, live.streaming, live.streaming.pit.world, logicsrc.com, nichedb.dev, nixamp.com, nixamp.example.com, oauth2.googleapis.com, openidconnect.googleapis.com, pairux.com, pit.world, placeholder.invalid, player.vimeo.com, queue.fal.run, rest.alpha.fal.ai, schema.org, server1.chovy.nixamp.com, server1.you.nixamp.com, server2.example.com, w.soundcloud.com, www.backtoschool.help, www.w3.org, www.youtube-nocookie.com, you.example, your-tunnel.example.com

Source & flagged code

20 flagged

dist/links.jsView file

22import { createHash } from "node:crypto"; L23: import { spawn } from "node:child_process"; L24: import { parseCatalog } from "./catalogs.js";

High

Child Process

Package source references child process execution.

dist/links.jsView on unpkg · L22

dist/speech.jsView file

230try { L231: return (await import(__rewriteRelativeImportExtension(name))); L232: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/speech.jsView on unpkg · L230

dist/catalogs.jsView file

Lines 107-147javascript

107 return "Live TV";

108 return "";

109}

110/** `key="value"` pairs off an #EXTINF line. */

111function attributesOf(text) {

112 const found = {};

113 for (const match of text.matchAll(/([A-Za-z][\w-]*)="([^"]*)"/g)) {

114 found[match[1].toLowerCase()] = match[2];

115 }

116 return found;

117}

118/** Trim, flatten, and cut: these strings are written by whoever made the list. */

119function clean(value, max) {

120 return value.replace(/[-]/g, " ").trim().slice(0, max);

121}

122export function entryId(source) {

123 return createHash("sha1").update(source).digest("hex").slice(0, 12);

124}

125/**

126 * Parse an extended m3u: `#EXTINF:-1 tvg-name="CNN" group-title="News",CNN HD`

127 * decorates the URL on the next line, `#EXTGRP:News` names the group for

128 * lists that write it that way instead, and `#EXTIMG:https://...` is the

129 * picture for lists (a podcast's episodes, say) that carry one that way

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/catalogs.jsView on unpkg · L127

130 * rather than as a tvg-logo attribute.

131 */

132export function parseCatalog(text, base) {

133 const out = [];

134 const seen = new Set();

135 let duration = 0;

136 let title = "";

137 let group = "";

138 let logo = "";

139 let grp = "";

140 for (const raw of text.split(/\r?\n/)) {

141 const line = raw.trim();

142 if (line === "")

143 continue;

144 if (line.startsWith("#")) {

145 const info = /^#EXTINF:\s*(-?[\d.]+)\s*(.*)$/i.exec(line);

146 if (info) {

147 const seconds = Number(info[1]);

web/dist/assets/radio-dUHZb5wV.jsView file

1import"./modulepreload-polyfill-P2Xu9kJm.js";import{n as e}from"./chunk-Q2XQMA4B-BaoaSqsD.js";import{l as t}from"./remote-DJqvFdE6.js";var n=e=>document.querySelector(e);function r...

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

web/dist/assets/radio-dUHZb5wV.jsView on unpkg · L1

dist/server.jsView file

8* commands a remote sends. State is pushed over Server-Sent Events rather than L9: * a WebSocket because SSE is plain HTTP: no dependency, and it reconnects on L10: * its own when the laptop running the remote goes to sleep. ... L18: import { hostname } from "node:os"; L19: import { spawn, spawnSync } from "node:child_process"; L20: import { readFileSync } from "node:fs"; ... L174: // A platform that hands out the port does it through PORT; a flag still wins. L175: const fromEnv = Number(process.env.PORT); L176: const options = { ... L869: response.writeHead(refused.status, headers); L870: response.end(Buffer.from(await refused.arrayBuffer())); L871: }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/server.jsView on unpkg · L8

dist/manage.jsView file

8*/ L9: import { spawnSync } from "node:child_process"; L10: import { existsSync, readFileSync } from "node:fs"; ... L12: import { fileURLToPath } from "node:url"; L13: const SITE = "https://nixamp.com"; L14: /** Windows has its own installer, its own shim and its own removal script. */ L15: const windows = process.platform === "win32"; L16: /** ... L21: export function installRoot(from = fileURLToPath(new URL(".", import.meta.url))) { L22: const declared = process.env["NIXAMP_HOME"]; L23: if (declared && existsSync(join(declared, "manifest.json"))) ... L42: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/manage.jsView on unpkg · L8

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/manage.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/manage.jsView on unpkg

web/dist/install.shView file

•path = web/dist/install.sh kind = build_helper sizeBytes = 15393 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web/dist/install.shView on unpkg

dist/accounts.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 14

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/accounts.js#virtual:string-array:round1View on unpkg

dist/ai-radio.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/ai-radio.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/ai-radio.jsView on unpkg

dist/session.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/session.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/session.jsView on unpkg

src/ai-radio.tsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = src/ai-radio.ts matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/ai-radio.tsView on unpkg

src/session.tsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = src/session.ts matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/session.tsView on unpkg

dist/daemon.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/daemon.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon.jsView on unpkg

src/daemon.tsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = src/daemon.ts matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/daemon.tsView on unpkg

src/manage.tsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = src/manage.ts matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/manage.tsView on unpkg

dist/channels.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/channels.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/channels.jsView on unpkg

dist/guide-rooms.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/guide-rooms.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/guide-rooms.jsView on unpkg

dist/jingle.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/jingle.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/jingle.jsView on unpkg

dist/lyrics.jsView file

•matchType = normalized_sha256 matchedPackage = nixamp@0.62.3 matchedPath = dist/lyrics.js matchedIdentity = npm:bml4YW1w:0.62.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lyrics.jsView on unpkg

Source & flagged code

20 flagged · loading source

dist/links.jsView file

22import { createHash } from "node:crypto"; L23: import { spawn } from "node:child_process"; L24: import { parseCatalog } from "./catalogs.js";

High

Child Process

Package source references child process execution.

dist/links.jsView on unpkg · L22

dist/speech.jsView file

230try { L231: return (await import(__rewriteRelativeImportExtension(name))); L232: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/speech.jsView on unpkg · L230

dist/catalogs.jsView file

127* decorates the URL on the next line, `#EXTGRP:News` names the group for L128: * lists that write it that way instead, and `#EXTIMG:https://...` is the L129: * picture for lists (a podcast's episodes, say) that carry one that way ... L209: throw new Error(`${source} answered ${answer.status}`); L210: const text = await answer.text(); L211: if (text.length > maxBytes)

Findings

1 Critical16 High5 Medium6 Low

CriticalHardcoded Runtime Data Exfiltrationweb/dist/assets/radio-dUHZb5wV.js

HighChild Processdist/links.js

HighCommand Output Exfiltrationdist/server.js

HighSandbox Evasion Gated Capabilitydist/manage.js

HighSemantic Analysis Limiteddist/accounts.js#virtual:string-array:round1

HighKnown Malware Source Similaritydist/ai-radio.js

HighKnown Malware Source Similaritydist/session.js

HighKnown Malware Source Similaritysrc/ai-radio.ts

HighKnown Malware Source Similaritysrc/session.ts

HighKnown Malware Source Similaritydist/daemon.js

HighKnown Malware Source Similaritydist/manage.js

Affected versions and remediation

This report applies to nixamp@0.72.1.

See all versions of nixamp for other recorded verdicts.

Review the evidence and your use of nixamp@0.72.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-23 00:13:37.074Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.