registry / wechat-bro / 1.0.2
wechat-bro@1.0.2
AI agent interface for WeChat Web — send/receive messages, manage contacts, upload media, transcribe voice
AI Security Review
scanned 26d ago · by lpm-firewall-aiSource inspection found an unauthenticated WebSocket command interface that can control the WeChat daemon while it is running. This is a real unresolved exposure risk, but the inspected source does not establish its network binding or demonstrate malicious intent, so a warning is appropriate.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user starts the daemon, then a client connects to its WebSocket port.
Impact
Any client able to reach the listening port may be able to issue commands through the user's WeChat session, including sending messages or files.
Mechanism
The server accepts incoming messages and dispatches their command fields directly; the auth message only sets an agent label.
AI rationale
Source inspection found an unauthenticated WebSocket command interface that can control the WeChat daemon while it is running. This is a real unresolved exposure risk, but the inspected source does not establish its network binding or demonstrate malicious intent, so a warning is appropriate.
Evidence
src/cli.jssrc/ws-server.js
Network endpoints1
wx.qq.com
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The daemon starts a WebSocket server on a configurable port and dispatches received commands to its command handler.
- The WebSocket server accepts commands without requiring authentication; its optional auth command only records an agent name.
- The package lifecycle downloads Chromium into the package's own user data directory.
Evidence against
- Media upload sends WeChat session cookies to the upload URL supplied by WeChat page parameters, matching the package's stated WeChat function.
- The install hook is a Chromium setup step; inspected source shows no unrelated consumer policy mutation.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedpackage.jsonView file
•scripts.postinstall = node -e "const p=require('path'),o=require('os'),d=p.join(o.homedir(),'.wechat-bro','chromium');process.env.PUPPETEER_CACHE_DIR=d;const pup=require('puppeteer');(async()=>{try{awai...
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "const p=require('path'),o=require('os'),d=p.join(o.homedir(),'.wechat-bro','chromium');process.env.PUPPETEER_CACHE_DIR=d;const pup=require('puppeteer');(async()=>{try{awai...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsrc/upload.jsView file
9L10: const { execFileSync } = require('child_process')
L11: const fs = require('fs')
High
Child Process
Package source references child process execution.
Findings
1 Critical5 High3 Medium4 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processsrc/upload.js
HighShellsrc/cli.js
HighSame File Env Network Executionsrc/cli.js
HighRuntime Package Installsrc/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to wechat-bro@1.0.2.
See all versions of wechat-bro for other recorded verdicts.
- Review the evidence and your use of wechat-bro@1.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.