registry / switchboard-router / 0.6.0

switchboard-router@0.6.0

Switchboard CLI — local AI routing gateway (install: npm i -g switchboard-router; run: switchboard)

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install triggers runtime dependency setup; running `switchboard` activates routing/MITM features.

Impact

A user who activates the MITM feature can route supported AI-tool traffic through a local proxy and modify system hosts entries.

Mechanism

postinstall runtime package installation plus user-invoked privileged HTTPS interception

Rationale

The static hints correctly identify install-time package installation and a privileged MITM capability, but source inspection does not establish concrete malicious behavior. Flag as a warning for risky dual-use behavior and install-time side effects rather than block.

Evidence

package.jsonhooks/postinstall.jshooks/sqliteRuntime.jshooks/trayRuntime.jscli.jsapp/src/mitm/server.jsapp/src/lib/updater/updater.jssrc/shared/dataDir.js

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`package.json` runs `hooks/postinstall.js` automatically.
`hooks/sqliteRuntime.js` installs `sql.js` and `better-sqlite3` into the user data directory.
`hooks/trayRuntime.js` installs `systray2` and deletes legacy runtime copies.
`app/src/mitm/server.js` is a bundled privileged HTTPS interception/hosts-file component.
`app/src/lib/updater/updater.js` runs global `npm i -g switchboard-router@latest` when invoked.

Evidence against

Postinstall only warms pinned runtime dependencies; it does not launch the router or MITM server.
Runtime installs use npm arguments rather than downloaded shell payloads.
No source evidence of credential-file harvesting or exfiltration was found in inspected files.
CLI starts the server only through the user-invoked `switchboard` command.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 38 file(s), 552 KB of source, external domains: 127.0.0.1, api.example.com, registry.npmjs.org, www.apple.com

Source & flagged code

15 flagged

package.jsonView file

Lines 9-49json

9 "type": "git",

10 "url": "git+https://github.com/Vijay-Duke/switchboard-router.git"

11 },

12 "homepage": "https://github.com/Vijay-Duke/switchboard-router#readme",

13 "bugs": {

14 "url": "https://github.com/Vijay-Duke/switchboard-router/issues"

15 },

16 "files": [

17 "cli.js",

18 "src",

19 "hooks",

20 "app",

21 "README.md",

22 "LICENSE"

23 ],

24 "scripts": {

25 "dev": "nodemon -I --watch cli.js --watch src --watch hooks --ext js,json cli.js",

26 "build": "node scripts/build-cli.js",

27 "pack:cli": "npm run build && npm pack --pack-destination ..",

28 "publish:cli": "npm run build && npm publish",

29 "postinstall": "node hooks/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 "prepublishOnly": "npm run build"

31 },

32 "dependencies": {

33 "enquirer": "^2.4.1",

34 "node-forge": "^1.3.3",

35 "node-machine-id": "^1.1.12",

36 "react": "^19.2.7",

37 "react-dom": "^19.2.7"

38 },

39 "comment_sqlite": "sql.js + better-sqlite3 are NOT bundled here. They are installed into ~/.switchboard/runtime/node_modules by hooks/postinstall.js (and re-checked at runtime by cli.js). This avoids Windows EBUSY errors when updating the global CLI, since native .node files no longer live under the locked install dir.",

40 "comment_systray": "systray2 is NOT bundled here. It is lazy-installed into ~/.switchboard/runtime/node_modules by hooks/postinstall.js on macOS/Linux only. Windows uses PowerShell NotifyIcon (zero binary). This avoids shipping unsigned Go binaries that trigger antivirus false positives (Kaspersky). We use the systray2 fork because the legacy systray@1.0.5 ships a 2017 x86_64 binary that fails on modern macOS dyld.",

41 "engines": {

42 "node": ">=18.0.0"

43 },

44 "keywords": [

45 "switchboard",

46 "cli",

47 "proxy",

48 "ai",

49 "api"

app/.next-cli-build/server/chunks/3675.jsView file

Lines 1-1javascript

1"use strict";exports.id=3675,exports.ids=[3675],exports.modules={3675:(a,b,c)=>{let d;c.d(b,{SignJWT:()=>O,importPKCS8:()=>U

app/src/mitm/server.jsView file

Lines 4-52javascript

4${c}`;qt.writeFileSync(n,v)}catch{}},file:n}}Xn.exports={log:wu,err:Ru,dumpRequest:Uu,createResponseDumper:Pu,clearDumpDir:Lu}});var Y=F((oh,Jn)=>{Jn.exports={options:{usePureJavaScript:!1}}});var ti=F((uh,ei)=>{var wa={};ei.exports=wa;var Zn={};wa.encode=function(e,t,a){if(typeof t!="string")throw new TypeError('"alphabet" must be a string.');if(a!==void 0&&typeof a!="number")throw new TypeError('"maxline" must be a number.');var r="";if(!(e instanceof Uint8Array))r=Ou(e,t);else{var n=0,s=t.length,i=t.charAt(0),o=[0];for(n=0;n<e.length;++n){for(var u=0,l=e[n];u<o.length;++u)l+=o[u]<<8,o[u]=l% ...

5`)}return r};wa.decode=function(e,t){if(typeof e!="string")throw new TypeError('"input" must be a string.');if

app/server.jsView file

Lines 1-21javascript

1const path = require('path')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/server.jsView on unpkg · L1

3const dir = path.join(__dirname)

5process.env.NODE_ENV = 'production'

src/cli/tray/autostart.jsView file

Lines 1-23javascript

1const fs = require("fs");

2const path = require("path");

3const os = require("os");

4const { execSync } =

cli.jsView file

2Cross-file remote execution chain: cli.js spawns app/src/mitm/server.js; helper contains network access plus dynamic code execution. L2: L3: const { spawn, execSync } = require("child_process"); L4: const path = require("path"); L5: const fs = require("fs"); L6: const https = require("https"); L7: const os = require("os"); ... L17: start() { L18: if (process.stdout.isTTY) { L19: process.stdout.write(`\r${frames[0]} ${currentText}`); L20: interval = setInterval(() => { ... L45: L46: const pkg = require("./package.json");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

cli.jsView on unpkg · L2

app/src/lib/updater/updater.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = switchboard-router@0.5.21 matchedIdentity = npm:c3dpdGNoYm9hcmQtcm91dGVy:0.5.21 similarity = 0.629 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app/src/lib/updater/updater.jsView on unpkg

1// Standalone detached updater process. L2: // Spawns `npm i -g <pkg>@latest`, exposes progress via tiny HTTP server. L3: // Survives after parent Next server exits (detached + unref by spawner). L4: L5: const { spawn } = require("child_process"); L6: const http = require("http");

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

app/src/lib/updater/updater.jsView on unpkg · L1

src/cli/tray/tray.ps1View file

•path = src/cli/tray/tray.ps1 kind = build_helper sizeBytes = 4005 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/cli/tray/tray.ps1View on unpkg

app/.next-cli-build/static/media/73cb51aac9c97f90-s.woff2View file

•path = app/.next-cli-[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 4320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

app/.next-cli-build/static/media/73cb51aac9c97f90-s.woff2View on unpkg

app/.next-cli-build/server/chunks/9078.jsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = "use str...}}};

Critical

Secret Pattern

RSA private key in app/.next-cli-build/server/chunks/9078.js

app/.next-cli-build/server/chunks/9078.jsView on unpkg · L1

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node hooks/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node hooks/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

app/.next-cli-build/server/chunks/3675.jsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = "use str...}}};

Critical

Critical Secret

Package contains a critical-looking secret pattern.

app/.next-cli-build/server/chunks/3675.jsView on unpkg · L1

1patternName = private_key_rsa severity = critical line = 1 matchedText = "use str...}}};

Critical

Secret Pattern

RSA private key in app/.next-cli-build/server/chunks/3675.js

app/.next-cli-build/server/chunks/3675.jsView on unpkg · L1

app/src/mitm/server.jsView file

32`)}catch{}}var od=(()=>{let e=new Uint32Array(256);for(let t=0;t<256;t++){let a=t;for(let r=0;r<8;r++)a=a&1?3988292384^a>>>1:a>>>1;e[t]=a}return e})();function Po(e){let t=42949672... L33: `);t.push({role:"tool",tool_call_id:n.toolUseId||"",content:s})}let r=(e.content||"").trim();return(r||a.length===0)&&t.push({role:"user",content:r}),t}function fd(e){let t=e.toolU... L34: $proc = Start-Process powershell -ArgumentList @(

High

Child Process

Package source references child process execution.

app/src/mitm/server.jsView on unpkg · L32

24Private-MAC: `+B.digest().toHex()+`\r L25: `,s};Ca.publicKeyToOpenSSH=function(e,t){var a="ssh-rsa";t=t||"";var r=Ce.util.createBuffer();return vr(r,a),Et(r,e.e),Et(r,e.n),a+" "+Ce.util.encode64(r.bytes())+" "+t};Ca.private... L26: `);u=c.pop()||"";for(let g of c){let v=g.trim();if(!v||!v.startsWith("data:"))continue;let y=v.slice(5).trim();if(y!=="[DONE]"){process.env.DEBUG_MITM&&Ea(`[SSE in] ${y.slice(0,200... ... L32: `)}catch{}}var od=(()=>{let e=new Uint32Array(256);for(let t=0;t<256;t++){let a=t;for(let r=0;r<8;r++)a=a&1?3988292384^a>>>1:a>>>1;e[t]=a}return e})();function Po(e){let t=42949672... L33: `);t.push({role:"tool",tool_call_id:n.toolUseId||"",content:s})}let r=(e.content||"").trim();return(r||a.length===0)&&t.push({role:"user",content:r}),t}function fd(e){let t=e.toolU... L34: $proc = Start-Process powershell -ArgumentList @(

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

app/src/mitm/server.jsView on unpkg · L24

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

app/src/mitm/server.jsView on unpkg · L24

app/server.jsView file

1const path = require('path') L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/server.jsView on unpkg · L1

src/cli/tray/autostart.jsView file

3const os = require("os"); L4: const { execSync } = require("child_process"); L5: ... L36: } L37: const computed = path.resolve(__dirname, "..", "..", "..", "cli.js"); L38: if (fs.existsSync(computed)) return computed; ... L47: function enableAutoStart(cliPath) { L48: const platform = process.platform; L49: L50: if (!["darwin", "win32", "linux"].includes(platform)) return false; L51: if (platform === "linux" && !process.env.DISPLAY) return false; L52:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/cli/tray/autostart.jsView on unpkg · L3

cli.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

cli.jsView on unpkg · L2

app/src/lib/updater/updater.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app/src/lib/updater/updater.jsView on unpkg

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

app/src/lib/updater/updater.jsView on unpkg · L1

src/cli/tray/tray.ps1View file

•path = src/cli/tray/tray.ps1 kind = build_helper sizeBytes = 4005 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/cli/tray/tray.ps1View on unpkg

app/.next-cli-build/static/media/73cb51aac9c97f90-s.woff2View file

•path = app/.next-cli-[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 4320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

app/.next-cli-build/static/media/73cb51aac9c97f90-s.woff2View on unpkg

app/.next-cli-build/server/chunks/9078.jsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = "use str...}}};

Critical

Secret Pattern

RSA private key in app/.next-cli-build/server/chunks/9078.js

app/.next-cli-build/server/chunks/9078.jsView on unpkg · L1

Findings

4 Critical8 High7 Medium6 Low

CriticalCritical Secretapp/.next-cli-build/server/chunks/3675.js

CriticalPrevious Version Dangerous Deltaapp/src/lib/updater/updater.js

CriticalSecret Patternapp/.next-cli-build/server/chunks/3675.js

CriticalSecret Patternapp/.next-cli-build/server/chunks/9078.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processapp/src/mitm/server.js

HighShell

HighSame File Env Network Executionapp/src/mitm/server.js

HighCommand Output Exfiltrationapp/src/mitm/server.js

HighCross File Remote Execution Contextcli.js

HighRuntime Package Installapp/src/lib/updater/updater.js

HighShips High Entropy Blobapp/.next-cli-build/static/media/73cb51aac9c97f90-s.woff2

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requireapp/server.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencesrc/cli/tray/autostart.js

MediumShips Build Helpersrc/cli/tray/tray.ps1

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

15 flagged

package.jsonView file

Lines 9-49json

9 "type": "git",

10 "url": "git+https://github.com/Vijay-Duke/switchboard-router.git"

11 },

12 "homepage": "https://github.com/Vijay-Duke/switchboard-router#readme",

13 "bugs": {

14 "url": "https://github.com/Vijay-Duke/switchboard-router/issues"

15 },

16 "files": [

17 "cli.js",

18 "src",

19 "hooks",

20 "app",

21 "README.md",

22 "LICENSE"

23 ],

24 "scripts": {

25 "dev": "nodemon -I --watch cli.js --watch src --watch hooks --ext js,json cli.js",

26 "build": "node scripts/build-cli.js",

27 "pack:cli": "npm run build && npm pack --pack-destination ..",

28 "publish:cli": "npm run build && npm publish",

29 "postinstall": "node hooks/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 "prepublishOnly": "npm run build"

31 },

32 "dependencies": {

33 "enquirer": "^2.4.1",

34 "node-forge": "^1.3.3",

35 "node-machine-id": "^1.1.12",

36 "react": "^19.2.7",

37 "react-dom": "^19.2.7"

38 },

41 "engines": {

42 "node": ">=18.0.0"

43 },

44 "keywords": [

45 "switchboard",

46 "cli",

47 "proxy",

48 "ai",

49 "api"

app/.next-cli-build/server/chunks/3675.jsView file

Lines 1-1javascript

1"use strict";exports.id=3675,exports.ids=[3675],exports.modules={3675:(a,b,c)=>{let d;c.d(b,{SignJWT:()=>O,importPKCS8:()=>U

app/src/mitm/server.jsView file

Lines 4-52javascript

5`)}return r};wa.decode=function(e,t){if(typeof e!="string")throw new TypeError('"input" must be a string.');if

app/server.jsView file

Lines 1-21javascript

1const path = require('path')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/server.jsView on unpkg · L1

3const dir = path.join(__dirname)

5process.env.NODE_ENV = 'production'

src/cli/tray/autostart.jsView file

Lines 1-23javascript

1const fs = require("fs");

2const path = require("path");

3const os = require("os");

4const { execSync } =

cli.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

cli.jsView on unpkg · L2

app/src/lib/updater/updater.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app/src/lib/updater/updater.jsView on unpkg

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

app/src/lib/updater/updater.jsView on unpkg · L1

src/cli/tray/tray.ps1View file

•path = src/cli/tray/tray.ps1 kind = build_helper sizeBytes = 4005 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/cli/tray/tray.ps1View on unpkg

app/.next-cli-build/static/media/73cb51aac9c97f90-s.woff2View file

•path = app/.next-cli-[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 4320 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

app/.next-cli-build/static/media/73cb51aac9c97f90-s.woff2View on unpkg

app/.next-cli-build/server/chunks/9078.jsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = "use str...}}};

Critical

Secret Pattern

RSA private key in app/.next-cli-build/server/chunks/9078.js

app/.next-cli-build/server/chunks/9078.jsView on unpkg · L1