registry / Persistence / openchamber-sogawugu / 1.21.0

openchamber-sogawugu@1.21.0

[![GitHub stars](https://img.shields.io/github/stars/openchamber/openchamber?style=flat&logo=data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0iI2YxZWNlYyIgdmlld0JveD0iMCAwIDI1Ni

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package contains user-invoked persistence and telemetry, so it warrants a warning. Source inspection found no lifecycle hook, covert trigger, credential theft, or unconsented foreign control-surface mutation.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

The user runs openchamber startup enable or starts the application update check.

Impact

A user-requested service can persist across login; the update service receives a pseudonymous identifier and environment metadata.

Mechanism

User-invoked startup persistence and update telemetry.

AI rationale

Evidence

package.jsonbin/lib/commands-startup.jsbin/lib/cli-startup.jsserver/lib/package-manager.js~/.config/systemd/user/openchamber.service

Network endpoints1

api.openchamber.dev/v1/update/check

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The explicit startup enable command creates and enables a per-user operating-system service.
The update checker sends an installation identifier and basic platform/version data to the vendor endpoint.

Evidence against

package.json has no preinstall, install, or postinstall lifecycle hook.
Startup persistence is reached only through the explicit startup enable command.
The service runs this package's own foreground server, not a foreign agent control surface.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

Source & flagged code

11 flagged

bin/cli.test.jsView file

6import net from 'net'; L7: import { spawn } from 'child_process'; L8: import { pathToFileURL } from 'url';

High

Child Process

Package source references child process execution.

bin/cli.test.jsView on unpkg · L6

bin/lib/cli-startup.jsView file

52L53: function powershellQuote(value) { L54: return `'${String(value).replace(/'/g, "''")}'`;

High

Shell

Package source references shell execution.

bin/lib/cli-startup.jsView on unpkg · L52

3Trigger-reachable persistence chain: scripts.start -> bin/cli.js -> bin/lib/commands-startup.js -> bin/lib/cli-startup.js L3: import path from 'path'; L4: import { spawnSync } from 'child_process'; L5: import { DEFAULT_PORT } from './cli-args.js'; ... L13: function getStartupServicePaths() { L14: if (process.platform === 'darwin') { L15: return { L16: platform: 'macos', L17: servicePath: path.join(os.homedir(), 'Library', 'LaunchAgents', `${STARTUP_SERVICE_ID}.plist`), L18: }; ... L78: const env = options.envSnapshot === false ? {} : Object.fromEntries( L79: Object.entries(process.env) L80: .filter(([key, value]) => shouldPersistStartupEnv(key, value))

Findings

7 High5 Medium8 Low

HighChild Processbin/cli.test.js

HighShellbin/lib/cli-startup.js

HighSame File Env Network Executionserver/lib/opencode/lifecycle.js

HighSandbox Evasion Gated Capabilityserver/lib/cloudflare-tunnel.js

HighTrigger Reachable Persistencebin/lib/cli-startup.js

HighSemantic Analysis Limiteddist/assets/useAppFontEffects-CwYvL_GY.js

HighKnown Malware Source Similaritydist/assets/sql-D0XecflT.js

MediumDynamic Requirebin/lib/commands-serve.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebin/lib/cli-startup.js

MediumStructural Risk Force Deep Review

Low

Affected versions and remediation

This report applies to openchamber-sogawugu@1.21.0.

See all versions of openchamber-sogawugu for other recorded verdicts.

Review the evidence and your use of openchamber-sogawugu@1.21.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-28 08:19:16.461Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Persistence / openchamber-sogawugu / 1.21.0

openchamber-sogawugu@1.21.0

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

The user runs openchamber startup enable or starts the application update check.

Impact

A user-requested service can persist across login; the update service receives a pseudonymous identifier and environment metadata.

Mechanism

User-invoked startup persistence and update telemetry.

AI rationale

Evidence

package.jsonbin/lib/commands-startup.jsbin/lib/cli-startup.jsserver/lib/package-manager.js~/.config/systemd/user/openchamber.service

Network endpoints1

api.openchamber.dev/v1/update/check

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The explicit startup enable command creates and enables a per-user operating-system service.
The update checker sends an installation identifier and basic platform/version data to the vendor endpoint.

Evidence against

package.json has no preinstall, install, or postinstall lifecycle hook.
Startup persistence is reached only through the explicit startup enable command.
The service runs this package's own foreground server, not a foreign agent control surface.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

Source & flagged code

11 flagged

bin/cli.test.jsView file

6import net from 'net'; L7: import { spawn } from 'child_process'; L8: import { pathToFileURL } from 'url';

High

Child Process

Package source references child process execution.

bin/cli.test.jsView on unpkg · L6

bin/lib/cli-startup.jsView file

52L53: function powershellQuote(value) { L54: return `'${String(value).replace(/'/g, "''")}'`;

High

Shell

Package source references shell execution.

bin/lib/cli-startup.jsView on unpkg · L52

Findings

7 High5 Medium8 Low

HighChild Processbin/cli.test.js

HighShellbin/lib/cli-startup.js

HighSame File Env Network Executionserver/lib/opencode/lifecycle.js

HighSandbox Evasion Gated Capabilityserver/lib/cloudflare-tunnel.js

HighTrigger Reachable Persistencebin/lib/cli-startup.js

HighSemantic Analysis Limiteddist/assets/useAppFontEffects-CwYvL_GY.js

HighKnown Malware Source Similaritydist/assets/sql-D0XecflT.js

MediumDynamic Requirebin/lib/commands-serve.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebin/lib/cli-startup.js

MediumStructural Risk Force Deep Review

Low

Affected versions and remediation

This report applies to openchamber-sogawugu@1.21.0.

See all versions of openchamber-sogawugu for other recorded verdicts.

Review the evidence and your use of openchamber-sogawugu@1.21.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-28 08:19:16.461Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.