ride@1.6.0

BLOCKED

Publisher claims: "Ambient Ride skill for TADA/Throo ride-hailing and taxi service. Wallet, USDC bridge status and recovery, deposit, collateral, ride, payment, chat, and tipping workflows; use it for wallet balances, starting and resuming USDC bridges, and bridge progress." Observed in sandbox: reads credential files, sends data to registry.npmjs.org.

Registry ClawHubPublisher ambprotocol · joined 1 days agoInstalls 961Last detonated 21 h ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 1 scenarios

t+CategoryObserved action

0.8sfilesystemread ~/.npmrc

0.8sfilesystemread ~/.npm/_logs · ~/.npm/_cacache/index-v5/5f/1f/a3ebce3e1e9c85874fccc1ed593c0a7529a69a3f454b40deb33f8eb2a28b outside project

0.8snetworkCONNECT https://registry.npmjs.org

0.8sprocessexec /app/apps/web/node_modules/.bin/npm

0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npm

0.8sprocessexec /app/node_modules/.bin/npm

0.8sprocessexec /pnpm/npm

0.8sprocessexec /usr/local/sbin/npm

0.8sprocessexec /usr/local/bin/npm

0.8sprocessexited 1: {"error":"AMB_INSTALL_FAILED","message":"npm install failed: Command failed: npm i -g @ambprotocol/ride-cli@latest"}

0.8sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsREADME.md:199 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/ride-relay.js:156 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Financial transfer languageREADME.md:266 · Financial transfer language — potential advance-fee scam

AST01

CRITICAL

Access to sensitive file pathsREADME.md:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:304 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Privileged sudo commandREADME.md:191 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Access to sensitive file pathsscripts/ride-relay.js:632 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/ride-relay.js:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/install.js:641 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandSKILL.md:396 · Process kill command — agent can terminate processes

AST05

HIGH

Financial transfer languageREADME.md:264 · Financial transfer language — potential advance-fee scam

AST01

CRITICAL

Access to sensitive file pathsscripts/ride-relay.js:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/install.js:504 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/install.js:509 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Financial transfer languageREADME.md:291 · Financial transfer language — potential advance-fee scam

AST01

CRITICAL

Access to sensitive file pathsSKILL.md:462 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/install.js:495 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

References a credential file in the home directoryREADME.md:199 · References a credential file in the home directory

AST03

MEDIUM

File type combined with upload actionscripts/ride-relay.js:1008 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Process kill commandSKILL.md:424 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandSKILL.md:426 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandscripts/ride-relay.sh:7 · Process kill command — agent can terminate processes

AST05

LOW

Unpinned dependencyREADME.md:179 · Unpinned dependency

AST06

LOW

Unpinned dependencyREADME.md:158 · Unpinned dependency

AST06

HIGH

Process kill commandscripts/ride-relay.sh:12 · Process kill command — agent can terminate processes

AST05

HIGH

Financial transfer languagereferences/usage.md:64 · Financial transfer language — potential advance-fee scam

AST01

HIGH

Process kill commandreferences/ride.md:772 · Process kill command — agent can terminate processes

AST05

HIGH

Telegram Bot API URLscripts/ride-relay.js:533 · Telegram Bot API URL — data will be sent to Telegram

AST07

HIGH

Telegram Bot API URLscripts/ride-relay.js:496 · Telegram Bot API URL — data will be sent to Telegram

AST07

LOW

Unpinned dependencyREADME.md:203 · Unpinned dependency

AST06

HIGH

Process kill commandreferences/ride.md:998 · Process kill command — agent can terminate processes

AST05

HIGH

Financial transfer languagereferences/usage.md:37 · Financial transfer language — potential advance-fee scam

AST01