xchange-cli@0.12.21
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe ads module is obfuscated and sends a callback-provided value as bearer authorization during ad polling, but the credential source and destination cannot be established from the inspected source. This is a real, unresolved credential-handling risk, so warn rather than block.
Static reason
One or more suspicious static signals were detected.
Trigger
When the desktop app starts ad polling, its timer requests ad settings and creatives.
Impact
If the value is a user credential rather than an app-scoped token, it may be disclosed to the ad service without clear consent.
Mechanism
The ads module obtains a value through callbacks supplied by its caller and adds it to Authorization headers sent to an obfuscated API origin.
AI rationale
The ads module is obfuscated and sends a callback-provided value as bearer authorization during ad polling, but the credential source and destination cannot be established from the inspected source. This is a real, unresolved credential-handling risk, so warn rather than block.
Evidence
dist/app/dist/ads.jsdist/app/dist/main.js
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package exposes a CLI entry point and includes a bundled desktop app.
- The desktop app imports an obfuscated ads module.
- The ads module periodically obtains a value from a callback and uses it to request ad settings and creatives.
- Those requests attach the callback value as a bearer authorization header to an obfuscated API origin.
Evidence against
- The package describes routing requests to AI services, so credential use for its core purpose is expected.
- The inspected source does not reveal the credential’s origin or the API host, so unauthorized disclosure is not established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedTelemetry
Source & flagged code
6 flaggeddist/cli/src/systemd.jsView file
1const u=d,v=d,w=d;(function(h,i){const n=d,o=d,p=d,j=h();while(!![]){try{const k=parseInt(n(0x201))/(-0x749*-0x1+0x15d*-0x7+-0x1*-0x243)+parseInt(o(0x1d1))/(-0x2*-0x1199+-0x185e+0x...
High
Child Process
Package source references child process execution.
dist/cli/src/systemd.jsView on unpkg · L1bin/xchange.jsView file
11const entry = fs.existsSync(built) ? built : path.join(root, "packages", "cli", "src", "index.ts");
L12: await import(pathToFileURL(entry).href);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/xchange.jsView on unpkg · L11dist/app/dist/main.jsView file
1
Findings
6 High4 Medium5 Low
HighChild Processdist/cli/src/systemd.js
HighShell
HighSame File Env Network Executiondist/app/dist/main.js
HighObfuscated Payload Loaderdist/ui/presets-fallback.js
HighCross File Remote Execution Contextdist/cli/src/index.js
HighSemantic Analysis Limiteddist/app/dist/ads.js#virtual:normalized:round1
MediumDynamic Requirebin/xchange.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowCopyleft License
Affected versions and remediation
This report applies to xchange-cli@0.12.21.
See all versions of xchange-cli for other recorded verdicts.
- Review the evidence and your use of xchange-cli@0.12.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.