T06 · System Persistence
Warning
- Location
bin/opphub-oauth-login.js:242- Finding
OAuth Login Automatically Installs a Persistent Daily Scheduled Task
- Content
View full analysis
= 0) return JSON.parse(stdout.slice(objStart)); } catch {} return { action: "spawn_failed", cron_check: null }; } catch (e) { return { action: "spawn_error", cron_check: null, error: e?.message ?? String(e), }; } } await writeToken(t); clearStartState(); const cronSpawn = await runCronSetup(); ``` ```js // bin/opphub-cron-setup.js:168-210 async function cronAdd() { let delivery = { source: "alpha5_fallback" }; try { const raw = await darwinKeychainGet("opphub:default"); if (raw) { const token = JSON.parse(raw); const fromServer = await fetchDefaultChannel(token.access_token); if (fromServer.source === "server") { delivery = fromServer; } else { delivery.source = fromServer.source; delivery.reason = fromServer.reason; } } else { delivery.reason = "no token in keychain"; } } catch (e) { delivery.reason = e.message ?? String(e); } if (delivery.source !== "server") { delivery.channelType = "feishu"; delivery.accountId = "dev"; delivery.recipientId = await resolveDefaultUserOpenId(); } const argv = ["node", CHECK_UPDATE_BIN]; const args = [ "cron", "add", "--cron", DEFAULT_EXPR, "--tz", DEFAULT_TZ, "--name", CRON_NAME, "--description", "opphub skill daily check · check update, not 撮合", "--session", "isolated", `--channel=${delivery.channelType}`, `--account=${delive ...[truncated 2018 chars]- Remediation
View remediation