qwenproxy-cli@1.0.1
High-performance OpenAI & Anthropic compatible API gateway for Qwen with multi-account rotation, interactive TUI, and resilient tool calling.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package deliberately bypasses provider anti-bot controls and offers explicit multi-client configuration takeover, which warrants a warning. The install hook only downloads its declared browser dependency, and no concrete malware chain was found.
Decision evidence
public snapshot- Installation automatically downloads Chromium through a postinstall hook.
- The proxy installs stealth scripts explicitly intended to evade Qwen anti-bot controls.
- The explicit sync command can rewrite configuration for several AI coding clients and make this proxy active.
- The browser download is aligned with the declared Patchright dependency and browser-based proxy design.
- AI-client configuration changes occur only when the user invokes the sync command.
- Network traffic is directed to the configured Qwen origin; no separate undisclosed collection endpoint was found.
Source & flagged code
8 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
Findings
Affected versions and remediation
This report applies to qwenproxy-cli@1.0.1.
See all versions of qwenproxy-cli for other recorded verdicts.
- Review the evidence and your use of qwenproxy-cli@1.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.