w3bs.AccountStart building
PACKAGES / Profullstack

nixamp

Winamp-style audio player and streaming client for the terminal.

ThreatCrush · No malware found
INSTALLw3bs install nixamp.com/nixamp

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install nixamp.com/nixampInstall nixamp and track it for updates
  2. nixamp ~/MusicPlay a music folder in the terminal player
  3. nixamp <file>Play a single audio file
  4. nixamp loginSign in to nixamp.com via a browser provider or password
  5. nixamp party listList watch parties you could join right now

Every option: nixamp --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in nixamp 0.78.6. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-02 23:00 UTC · threatcrush 0.13.30
Files
479 (installer + github.com/profullstack/nixamp@51c74332f6e9)
Findings
16 high · 15 medium · 24 low
55 other findings (not malware)
  • high
    Database URL with credentialssource/.github/workflows/translation.yml:31secret-database-url · CWE-798
  • high
    Hardcoded Credentialsource/src/hls.ts:81secret-generic-credential · CWE-798
  • high
    URL built from the Host headersource/src/server.ts:3110js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3124js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3141js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3150js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3155js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3258js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3324js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3411js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3439js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3609js-host-header-trust · CWE-346
  • high
    URL built from the Host headersource/src/server.ts:3625js-host-header-trust · CWE-346
  • high
    outbound request to a non-constant URLsource/web/src/app.ts:115js-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/web/src/app.ts:163js-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/web/src/app.ts:167js-ssrf-outbound-request · CWE-918
  • medium
    unescaped HTML renderingsource/backtoschool/src/main.ts:95js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/backtoschool/src/main.ts:241js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/backtoschool/src/main.ts:257js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/backtoschool/src/main.ts:281js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/backtoschool/src/main.ts:366js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/backtoschool/src/main.ts:494js-unescaped-html-sink · CWE-79
  • medium
    regex with nested unbounded quantifierssource/src/server.ts:4820redos-nested-quantifier · CWE-1333
  • medium
    unescaped HTML renderingsource/web/src/app.ts:391js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/web/src/app.ts:392js-unescaped-html-sink · CWE-79
  • medium
    MAC or signature compared with ==source/web/src/app.ts:2454js-timing-unsafe-mac-compare · CWE-208
  • medium
    redirect to a non-constant destinationsource/web/src/app.ts:3869js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/web/src/app.ts:7376js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/web/src/control-icons.ts:19js-unescaped-html-sink · CWE-79
  • medium
    predictable randomness used for a security valuesource/web/src/music.ts:419insecure-randomness-for-secret · CWE-338
  • medium
    predictable randomness used for a security valuesource/web/src/station.ts:314insecure-randomness-for-secret · CWE-338
  • low
    Hardcoded Credentialsource/test/captions-store.test.ts:89secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/test/captions-store.test.ts:217secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/test/captions.test.ts:40secret-generic-credential · CWE-798
  • low
    Database URL with credentialssource/test/database-url.test.ts:10secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/database-url.test.ts:11secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/database-url.test.ts:16secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/database-url.test.ts:21secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/database-url.test.ts:23secret-database-url · CWE-798
  • low
    Database URL with credentialssource/test/database-url.test.ts:25secret-database-url · CWE-798
  • low
    Hardcoded Credentialsource/test/directory.test.ts:427secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/test/nixamp-link.test.ts:135secret-generic-credential · CWE-798
  • low
    SQL built from a template literal or f-stringsource/test/nixamp-link.test.ts:312sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/test/party-cli.test.ts:28secret-generic-credential · CWE-798
  • low
    SQL built from a template literal or f-stringsource/test/profiles.test.ts:166sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/test/radio-pages.test.ts:66secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/test/signin.test.ts:897secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/test/signin.test.ts:906secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/test/transcribe.test.ts:11secret-generic-credential · CWE-798
  • low
    SQL built from a template literal or f-stringsource/test/translation-passes.test.ts:110sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/translation-passes.test.ts:175sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/upgrade-allowance.test.ts:58sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/upgrade-allowance.test.ts:127sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/test/voices.test.ts:143secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/web/scripts/check-interface.mjs:77secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/nixamp.com/nixamp/badge.svg)](https://w3bs.org/packages/nixamp.com/nixamp)