registry / Credential exfiltration / 3d-publisher
3d-publisher
> TODO: description
This report shows the evidence for 3d-publisher@0.0.7. 2 of 4 known versions are blocked or flagged. The newest version, 0.0.8, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe default external endpoint, cookie-token forwarding, and administrative POST operations form a concrete exfiltration path unrelated to the declared package presentation. There is no install hook, but runtime activation is sufficient for a publish block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A consumer renders the exported React container and uses its role-management interface.
Impact
An external service can receive an accessible authentication token and administrative application data from an embedding site.
Mechanism
Cookie-token forwarding to a hard-coded external API.
Attack narrative
The bundle is an application-specific role-management client disguised by unrelated documentation. On ordinary consumer hosts, its environment selector chooses 3d-test.onewo.com. Its Axios interceptor extracts an accesstoken cookie from the embedding page and places it in Authorization and Access-Token headers. When the rendered UI performs role-management operations, it posts request data to that external API. This creates a concrete runtime credential and application-data exfiltration path.
AI rationale
The default external endpoint, cookie-token forwarding, and administrative POST operations form a concrete exfiltration path unrelated to the declared package presentation. There is no install hook, but runtime activation is sufficient for a publish block.
Evidence
dist/index.umd.jsREADME.md
Network endpoints4
3d-test.onewo.com3d-login-test.onewo.com3d-login-fat.onewo.com3d-login.onewo.com
Decision evidence
public snapshotAI called this Malicious at 92.0% confidence as Malware with low false-positive risk.
Evidence for block
- On any unrecognized host, the bundle selects the external 3d-test.onewo.com API.
- The request interceptor reads the accesstoken browser cookie and sends it as authorization headers.
- Rendered role-management actions post caller-provided data to that configured external API.
- The package documentation identifies a different package, which obscures this application-specific network behavior.
Evidence against
- package.json contains no install lifecycle hook.
- The network activity requires the exported React container to be rendered; it is not install-time execution.
Behavioral surface
Network
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flagged · loading sourcedist/index.umd.jsView file
•Browser cookie sent to a fixed external endpoint in dist/index.umd.js:
/*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.[redacted]-helpers/LICENSE */
var DEV_SERVER_URL = "http://3d-test.onewo.com";
REDIRECTURL: "http://3d-login-test.onewo.com" // 登录过期重定向路径
REDIRECTURL: "http://3d-login-fat.onewo.com"
REDIRECTURL: "https://3d-login.onewo.com"
if (arr = document.cookie.match(reg)) return arr[2];else return null;
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.umd.jsView on unpkg306var DEV_SERVER_URL = "http://3d-test.onewo.com";
var envConstant = [{
BASEURL: "".concat(DEV_SERVER_URL, "/api"),
// 基础接口路径
REDIRECTURL: "http://3d-login-test.onewo.com" // 登录过期重定向路径
High
Ai Review Evidence
On any unrecognized host, the bundle selects the external 3d-test.onewo.com API.
dist/index.umd.jsView on unpkg · L306318function checkEnv() {
switch (host) {
// 正式环境
case "3d.onewo.com":
return envConstant[2];
// fat测试环境
case "3d-fat.onewo.com":
return envConstant[1];
// dev开发环境
default:
return envConstant[0];
}
}
Findings
1 Critical4 High3 Medium2 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.umd.js
HighAi Review Evidencedist/index.umd.js
HighAi Review Evidencedist/index.umd.js
HighAi Review Evidencedist/index.umd.js
HighAi Review EvidenceREADME.md
MediumNetwork
MediumStructural Risk Force Deep Review
MediumStripped Provenance Metadatadist/index.umd.js
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to 3d-publisher@0.0.7.
The versions list below shows the verdict for each recorded version.
- Avoid installing 3d-publisher@0.0.7. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.