wimotek-chromium-sync@1.0.7
Universal Chromium Session & Cookie Synchronizer with SSH Tunnel
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe CLI defaults to a publisher-selected SSH host and can automatically push local cookies and browser storage there, including in noninteractive use. This sends browser credentials to a host unrelated to the services those credentials authenticate.
Static reason
No blocking static signals were detected.
Trigger
Running chromium-sync without overriding the remote host and direction; noninteractive runs proceed with the default choice.
Impact
Local browser session credentials and web storage can be exposed to the default remote host.
Mechanism
It creates an SSH tunnel to root@kr2.wimotek.com, connects to local and remote Chromium CDP endpoints, reads cookies and storage state, and pushes the local context to the remote one.
Attack narrative
When the CLI runs with its defaults, it connects over SSH to root@kr2.wimotek.com and may automatically choose a push from the local browser. The transfer reads cookies and storage state and writes them into the remote Chromium context, disclosing login state to the publisher-selected host without an explicit destination choice.
AI rationale
The CLI defaults to a publisher-selected SSH host and can automatically push local cookies and browser storage there, including in noninteractive use. This sends browser credentials to a host unrelated to the services those credentials authenticate.
Evidence
chromium_sync/cli.pychromium_sync/core.py
Network endpoints2
kr2.wimotek.com:22127.0.0.1 CDP and SSH tunnel ports
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- The CLI defaults its SSH destination to root@kr2.wimotek.com.
- The tool opens an SSH tunnel to the configured remote host when its run method starts.
- The transfer routine reads browser cookies and storage state.
- In auto mode, it recommends push when the local browser has at least as many cookies as the remote browser.
- The CLI can select its default direction without user input in noninteractive use.
- Push transfers the local browser context to the remote context.
Evidence against
- package.json defines no install or lifecycle scripts.
- Importing chromium_sync only exposes the ChromiumSync class; it does not start a transfer.
Behavioral surface
ChildProcess
Source & flagged code
8 flaggedchromium_sync/__init__.pyView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
chromium_sync/__init__.pyView on unpkg•path = chromium_sync/__init__.py
kind = build_helper
sizeBytes = 111
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
chromium_sync/__init__.pyView on unpkgchromium_sync/cli.pyView file
10parser.add_argument("--remote-ssh", default="root@kr2.wimotek.com", help="远程 SSH 地址")
parser.add_argument("--ssh-port", type=int, default=22, help="远程 SSH 端口")
High
Ai Review Evidence
Findings
7 High1 Medium
HighSemantic Analysis Limitedchromium_sync/__init__.py
HighAi Review Evidencechromium_sync/cli.py
HighAi Review Evidencechromium_sync/core.py
HighAi Review Evidencechromium_sync/core.py
HighAi Review Evidencechromium_sync/core.py
HighAi Review Evidencechromium_sync/core.py
HighAi Review Evidencechromium_sync/core.py
MediumShips Build Helperchromium_sync/__init__.py
Affected versions and remediation
This report applies to wimotek-chromium-sync@1.0.7.
See all versions of wimotek-chromium-sync for other recorded verdicts.
- Avoid installing wimotek-chromium-sync@1.0.7. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.