registry / wechat-bro / 1.6.13
wechat-bro@1.6.13
AI agent interface for WeChat Web — send/receive messages, manage contacts, upload media, transcribe voice
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe server is advertised for localhost use, but its listener passes no host restriction and accepts commands without authentication. This creates a meaningful exposure of the user’s WeChat account on hosts where the port is reachable; the source does not establish malicious intent.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user starts the daemon while logged into WeChat; a peer able to reach its listening port connects.
Impact
A reachable peer may enumerate contacts or send messages through the user’s logged-in WeChat session.
Mechanism
The server listens with only a port option, accepts commands without an authentication check, and dispatches them to WeChat operations.
AI rationale
The server is advertised for localhost use, but its listener passes no host restriction and accepts commands without authentication. This creates a meaningful exposure of the user’s WeChat account on hosts where the port is reachable; the source does not establish malicious intent.
Evidence
src/ws-server.jssrc/cli.js.lpm-dependency-evidence-d2f056bf-db34-4e95-b085-82d7e45f2476/2/npm-linux/lib/websocket-server.js
Network endpoints1
ws://localhost:9231 (advertised endpoint; listener omits the host binding)
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- The daemon creates a WebSocket server with only a port option; the ws dependency passes the omitted host to Node’s listen call.
- Incoming WebSocket commands are dispatched without requiring authentication; the `auth` command only sets an agent name.
- The command interface exposes WeChat contact listing and message sending through the logged-in session.
Evidence against
- The package is described as a WeChat agent interface, so a local command server and WeChat account actions fit its purpose.
- The postinstall hook installs Puppeteer’s Chrome asset into `~/.wechat-bro/chromium`; no unrelated collector is apparent in that hook.
- The source advertises `ws://localhost:9231`, indicating the server is intended for local agents.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedpackage.jsonView file
•scripts.postinstall = node -e "const p=require('path'),o=require('os'),d=p.join(o.homedir(),'.wechat-bro','chromium');process.env.PUPPETEER_CACHE_DIR=d;const pup=require('puppeteer');(async()=>{try{awai...
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "const p=require('path'),o=require('os'),d=p.join(o.homedir(),'.wechat-bro','chromium');process.env.PUPPETEER_CACHE_DIR=d;const pup=require('puppeteer');(async()=>{try{awai...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgFindings
2 Critical4 High3 Medium4 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalPrevious Version Dangerous Deltasrc/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processsrc/upload.js
HighRuntime Package Installsrc/cli.js
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to wechat-bro@1.6.13.
See all versions of wechat-bro for other recorded verdicts.
- Review the evidence and your use of wechat-bro@1.6.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.