registry / xchange-cli / 0.12.27

xchange-cli@0.12.27

Use GPT (any ChatGPT plan with Codex), DeepSeek and 400+ other models in the Claude Desktop Code tab and Claude Code while staying signed in to your Claude subscription — no third-party gateway mode. Several ChatGPT accounts that take over when one runs o

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The manifest presents an AI model-routing CLI and contains no install hook. Although the compiled output is obfuscated and sponsored cards can load automatically, the inspected credential flow uses the configured service and the ad requests and receipts match that feature.

Static reason

One or more suspicious static signals were detected.

Trigger

The CLI runs on user request; the desktop app starts its sponsored-card feature at startup unless XCHANGE_ADS=0.

Impact

The observed requests support the package's advertised functionality; no unrelated credential collection or harmful action was established.

Mechanism

The app requests sponsored creatives and reports impression outcomes using feature authorization; it can exchange a session token with the configured service URL.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 78.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package describes an AI model router and exposes a CLI entry point; its manifest has no install lifecycle hook.
The desktop app starts a sponsored-card feature unless XCHANGE_ADS=0 is set, and loads account plan and token data for that feature.
The ad module uses authorization to request sponsored creatives and send impression outcomes, which are data used by that feature.
When configured, the app exchanges its session token with its configured service URL for a house credential used by the ad feature.

Evidence against

Several compiled files are heavily obfuscated, limiting direct inspection of their string constants.
Sponsored-card requests can run automatically when the desktop app starts.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

6 flagged

dist/cli/src/systemd.jsView file

1const u=d,v=d,w=d;(function(h,i){const n=d,o=d,p=d,j=h();while(!![]){try{const k=-parseInt(n(0x217))/(0x1*-0x15e8+-0x1*-0x1c10+0x627*-0x1)+parseInt(n(0x1e6))/(-0x1cd*-0x11+-0x30*-0...

High

Child Process

Package source references child process execution.

dist/cli/src/systemd.jsView on unpkg · L1

bin/xchange.jsView file

11const entry = fs.existsSync(built) ? built : path.join(root, "packages", "cli", "src", "index.ts"); L12: await import(pathToFileURL(entry).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/xchange.jsView on unpkg · L11

dist/app/dist/main.jsView file

Findings

6 High4 Medium5 Low

HighChild Processdist/cli/src/systemd.js

HighShell

HighSame File Env Network Executiondist/app/dist/main.js

HighObfuscated Payload Loaderdist/ui/three.module.js

HighCross File Remote Execution Contextdist/cli/src/index.js

HighSemantic Analysis Limiteddist/app/dist/ads.js#virtual:normalized:round1

MediumDynamic Requirebin/xchange.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowCopyleft License

Affected versions and remediation

This report applies to xchange-cli@0.12.27.

See all versions of xchange-cli for other recorded verdicts.

Review the evidence and your use of xchange-cli@0.12.27 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 13:34:25.477Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / xchange-cli / 0.12.27

xchange-cli@0.12.27

AI Security Review

scanned 1d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

The CLI runs on user request; the desktop app starts its sponsored-card feature at startup unless XCHANGE_ADS=0.

Impact

The observed requests support the package's advertised functionality; no unrelated credential collection or harmful action was established.

Mechanism

The app requests sponsored creatives and reports impression outcomes using feature authorization; it can exchange a session token with the configured service URL.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 78.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package describes an AI model router and exposes a CLI entry point; its manifest has no install lifecycle hook.
The desktop app starts a sponsored-card feature unless XCHANGE_ADS=0 is set, and loads account plan and token data for that feature.
The ad module uses authorization to request sponsored creatives and send impression outcomes, which are data used by that feature.
When configured, the app exchanges its session token with its configured service URL for a house credential used by the ad feature.

Evidence against

Several compiled files are heavily obfuscated, limiting direct inspection of their string constants.
Sponsored-card requests can run automatically when the desktop app starts.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

6 flagged

dist/cli/src/systemd.jsView file

1const u=d,v=d,w=d;(function(h,i){const n=d,o=d,p=d,j=h();while(!![]){try{const k=-parseInt(n(0x217))/(0x1*-0x15e8+-0x1*-0x1c10+0x627*-0x1)+parseInt(n(0x1e6))/(-0x1cd*-0x11+-0x30*-0...

High

Child Process

Package source references child process execution.

dist/cli/src/systemd.jsView on unpkg · L1

bin/xchange.jsView file

11const entry = fs.existsSync(built) ? built : path.join(root, "packages", "cli", "src", "index.ts"); L12: await import(pathToFileURL(entry).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/xchange.jsView on unpkg · L11

dist/app/dist/main.jsView file

Findings

6 High4 Medium5 Low

HighChild Processdist/cli/src/systemd.js

HighShell

HighSame File Env Network Executiondist/app/dist/main.js

HighObfuscated Payload Loaderdist/ui/three.module.js

HighCross File Remote Execution Contextdist/cli/src/index.js

HighSemantic Analysis Limiteddist/app/dist/ads.js#virtual:normalized:round1

MediumDynamic Requirebin/xchange.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowCopyleft License

Affected versions and remediation

This report applies to xchange-cli@0.12.27.

See all versions of xchange-cli for other recorded verdicts.

Review the evidence and your use of xchange-cli@0.12.27 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 13:34:25.477Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.