registry / wechat-bro / 1.6.8
wechat-bro@1.6.8
AI agent interface for WeChat Web — send/receive messages, manage contacts, upload media, transcribe voice
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe install hook performs package-aligned Puppeteer browser setup, and the inspected source uses WeChat session data for WeChat media uploads. No concrete malicious behavior was established in the required source paths.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Installation downloads Chromium only if Puppeteer cannot find it; agent dispatch and media upload occur when those features are used.
Impact
These inspected behaviors do not establish an attack surface or unauthorized credential disclosure.
Mechanism
The install hook sets a package-specific browser cache and may install Chrome. Dispatch places the chosen agent file in its task directory, and uploads use WeChat-provided parameters and URL.
AI rationale
The install hook performs package-aligned Puppeteer browser setup, and the inspected source uses WeChat session data for WeChat media uploads. No concrete malicious behavior was established in the required source paths.
Evidence
package.jsonsrc/orchestrator.jssrc/upload.jssrc/cli.js
Network endpoints2
wx.qq.comfile.wx.qq.com
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook configures Puppeteer’s Chromium cache under the package’s data directory and installs Chrome there if missing.
- During agent dispatch, the orchestrator links or copies the selected agent file to the task directory’s AGENTS.md.
- Media uploads use WeChat upload parameters and send the session cookie to the resulting upload URL.
- The CLI’s daemon setup runs when started in daemon mode or as a plain TTY run.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node -e "const p=require('path'),o=require('os'),d=p.join(o.homedir(),'.wechat-bro','chromium');process.env.PUPPETEER_CACHE_DIR=d;const pup=require('puppeteer');(async()=>{try{awai...
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "const p=require('path'),o=require('os'),d=p.join(o.homedir(),'.wechat-bro','chromium');process.env.PUPPETEER_CACHE_DIR=d;const pup=require('puppeteer');(async()=>{try{awai...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgFindings
2 Critical5 High3 Medium4 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalPrevious Version Dangerous Deltasrc/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processsrc/upload.js
HighSame File Env Network Executionsrc/cli.js
HighRuntime Package Installsrc/cli.js
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to wechat-bro@1.6.8.
See all versions of wechat-bro for other recorded verdicts.
- Review the evidence and your use of wechat-bro@1.6.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.