{"id":"nixamp.com/nixamp","name":"nixamp","commands":["nixamp"],"examples":[{"run":"nixamp ~/Music","does":"Play a music folder in the terminal player"},{"run":"nixamp <file>","does":"Play a single audio file"},{"run":"nixamp login","does":"Sign in to nixamp.com via a browser provider or password"},{"run":"nixamp party list","does":"List watch parties you could join right now"}],"description":"Winamp-style audio player and streaming client for the terminal.","homepage":"https://nixamp.com","repository":"https://github.com/profullstack/nixamp","license":"MIT","agentic":false,"latest_version":"0.78.6","vendor":"Profullstack","install":"curl -fsSL https://nixamp.com/install.sh | sh","publisher":"profullstack","w3bs":"w3bs install nixamp.com/nixamp","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":479,"summary":{"critical":0,"high":16,"medium":15,"low":24,"info":0},"malware":0,"truncated":false,"version":"0.78.6","sources":{"installer":"https://nixamp.com/install.sh","installerSha256":"964a31ebd0dbb34ceee074366f49f29173ac36a8fa7512c6a8ecf71f85516889","repository":"github.com/profullstack/nixamp","commit":"51c74332f6e94514acef5ec75ccbbb295683c4d6"},"notes":[],"scannedAt":"2026-11-02T23:00:11.442Z","findings":[{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"high","category":"secret","cwe":"CWE-798","file":"source/.github/workflows/translation.yml","line":31,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"high","category":"secret","cwe":"CWE-798","file":"source/src/hls.ts","line":81,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3110,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3124,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3141,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3150,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3155,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3258,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3324,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3411,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3439,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3609,"malware":false},{"ruleId":"js-host-header-trust","title":"URL built from the Host header","severity":"high","category":"code","cwe":"CWE-346","file":"source/src/server.ts","line":3625,"malware":false},{"ruleId":"js-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/web/src/app.ts","line":115,"malware":false},{"ruleId":"js-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/web/src/app.ts","line":163,"malware":false},{"ruleId":"js-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/web/src/app.ts","line":167,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/backtoschool/src/main.ts","line":95,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/backtoschool/src/main.ts","line":241,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/backtoschool/src/main.ts","line":257,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/backtoschool/src/main.ts","line":281,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/backtoschool/src/main.ts","line":366,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/backtoschool/src/main.ts","line":494,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/server.ts","line":4820,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/web/src/app.ts","line":391,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/web/src/app.ts","line":392,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/web/src/app.ts","line":2454,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/web/src/app.ts","line":3869,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/web/src/app.ts","line":7376,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/web/src/control-icons.ts","line":19,"malware":false},{"ruleId":"insecure-randomness-for-secret","title":"predictable randomness used for a security value","severity":"medium","category":"code","cwe":"CWE-338","file":"source/web/src/music.ts","line":419,"malware":false},{"ruleId":"insecure-randomness-for-secret","title":"predictable randomness used for a security value","severity":"medium","category":"code","cwe":"CWE-338","file":"source/web/src/station.ts","line":314,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/captions-store.test.ts","line":89,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/captions-store.test.ts","line":217,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/captions.test.ts","line":40,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/database-url.test.ts","line":10,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/database-url.test.ts","line":11,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/database-url.test.ts","line":16,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/database-url.test.ts","line":21,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/database-url.test.ts","line":23,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/database-url.test.ts","line":25,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/directory.test.ts","line":427,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/nixamp-link.test.ts","line":135,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/test/nixamp-link.test.ts","line":312,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/party-cli.test.ts","line":28,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/test/profiles.test.ts","line":166,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/radio-pages.test.ts","line":66,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/signin.test.ts","line":897,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/signin.test.ts","line":906,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/transcribe.test.ts","line":11,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/test/translation-passes.test.ts","line":110,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/test/translation-passes.test.ts","line":175,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/test/upgrade-allowance.test.ts","line":58,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/test/upgrade-allowance.test.ts","line":127,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/voices.test.ts","line":143,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/web/scripts/check-interface.mjs","line":77,"malware":false}]}}