registry / 3d-publisher / 0.0.6

3d-publisher@0.0.6

> TODO: description

AI Security Review

scanned 3h ago · by lpm-firewall-ai

The browser bundle globally configures Axios at import time. On unrecognized hosts, subsequent package API requests send an existing accesstoken cookie to a hard-coded external test server.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Import the bundle and use its role-management interface on a host other than the two recognized Onewo hosts.

Impact

An unrelated application's authentication token and role-management request data can be disclosed to the external test endpoint.

Mechanism

Default external API routing with cookie-token forwarding.

Attack narrative

At module import, the bundle changes the shared Axios base URL. Unless the page host exactly matches one of two expected Onewo domains, it chooses http://3d-test.onewo.com/api. Its interceptor then reads the page's accesstoken cookie and attaches it to requests. The component makes administrator and role API posts through that client, allowing token and submitted data to be sent to the hard-coded external server.

Rationale

This is concrete credential disclosure through package-controlled default routing, not merely ordinary network use. No install hook is needed because importing and using the browser component activates it.

Evidence

dist/index.umd.js

Network endpoints4

3d-test.onewo.com3d-login-test.onewo.com3d-login-fat.onewo.com3d-login.onewo.com

Decision evidence

public snapshot

AI called this Malicious at 95.0% confidence as Malware with low false-positive risk.

Evidence for block

Importing the bundle selects an external test API for every host other than two named Onewo hosts.
The request interceptor reads the accesstoken cookie and places it in two authentication headers.
The bundle posts administrator and role data through that configured client.

Evidence against

The manifest has no lifecycle scripts or self-dependency.
The bundle is structured as a role-management user interface, but that does not justify its unsafe default credential routing.

Behavioral surface

Source

Network

Supply chain

MinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 87.5 KB of source, external domains: 3d-login-fat.onewo.com, 3d-login-test.onewo.com, 3d-login.onewo.com, 3d-test.onewo.com

Source & flagged code

4 flagged

dist/index.umd.jsView file

Lines 281-357javascript

281 if (insertAt === 'top') {

282 if (head.firstChild) {

283 head.insertBefore(style, head.firstChild);

284 } else {

285 head.appendChild(style);

286 }

287 } else {

288 head.appendChild(style);

289 }

290

291 if (style.styleSheet) {

292 style.styleSheet.cssText = css;

293 } else {

294 style.appendChild(document.createTextNode(css));

295 }

296 }

297

298 var css = "html,\r\nbody,\r\n#root {\r\n height: 100%;\r\n}\r\n\r\n.ant-layout-header {\r\n background: #fff !important;\r\n}\r\n";

299 styleInject(css);

300

301 var protocol = window.location.protocol;

302 var host = window.location.host;

303 var serverURL = "".concat(protocol, "//").concat(host);

304 var DEV_SERVER_URL = "http://3d-test.onewo.com";

305 var envConstant = [{

306 BASEURL: "".concat(DEV_SERVER_URL, "/api"),

307 // 基础接口路径

308 REDIRECTURL: "http://3d-login-test.onewo.com" // 登录过期重定向路径

309 }, {

310 BASEURL: "".concat(serverURL, "/api"),

311 REDIRECTURL: "http://3d-login-fat.onewo.com"

312 }, {

High

Ai Review Evidence

Importing the bundle selects an external test API for every host other than two named Onewo hosts.

dist/index.umd.jsView on unpkg · L301

313 BASEURL: "".concat(serverURL, "/api"),

314 REDIRECTURL: "https://3d-login.onewo.com"

315 }];

316 function checkEnv() {

317 switch (host) {

318 // 正式环境

319 case "3d.onewo.com":

320 return envConstant[2];

321 // fat测试环境

322 case "3d-fat.onewo.com":

323 return envConstant[1];

324 // dev开发环境

325 default:

326 return envConstant[0];

327 }

328 }

329

330 // 解析url.获得对应的参数

331 //判断是否是IE浏览器

332 function isIE() {

333 //ie?

334 if (!!window.ActiveXObject || "ActiveXObject" in window) return true;else return false;

335 }

336

337 axios.defaults.baseURL = checkEnv().BASEURL;

338 // 获取cookie

339 function getCookie(cname) {

340 var arr,

341 reg = new RegExp("(^| )" + cname + "=([^;]*)(;|$)");

342 // eslint-disable-next-line

343 if (arr = document.cookie.match(reg)) return arr[2];else return null;

344 }

345

346 // http request 拦截器

347 axios.interceptors.request.use(function (config) {

348 // 取accesstoken

High

Ai Review Evidence

The request interceptor reads the accesstoken cookie and places it in two authentication headers.

dist/index.umd.jsView on unpkg · L337

349 var accesstoken = getCookie("accesstoken");

350 // 设置request-header

351 if (accesstoken) {

352 config.headers["Authorization"] = accesstoken;

353 config.headers["Access-Control-Allow-Origin"] = "*";

354 config.headers["Access-Token"] = accesstoken;

355 }

356 if (config.method === "get" && isIE()) {

357 config.params = _objectSpread2({

Lines 371-411javascript

371 // 重定向地址

372 var curLocation = window.location.href;

373 window.location.href = "".concat(window.location.protocol).concat(checkEnv().REDIRECTURL, "?redirect_url=").concat(encodeURIComponent(curLocation));

374 }

•Browser cookie sent to a fixed external endpoint in dist/index.umd.js: /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.[redacted]-helpers/LICENSE */ var DEV_SERVER_URL = "http://3d-test.onewo.com"; REDIRECTURL: "http://3d-login-test.onewo.com" // 登录过期重定向路径 REDIRECTURL: "http://3d-login-fat.onewo.com" REDIRECTURL: "https://3d-login.onewo.com" if (arr = document.cookie.match(reg)) return arr[2];else return null;

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/index.umd.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/index.umd.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/index.umd.jsView on unpkg

301var protocol = window.location.protocol; var host = window.location.host; var serverURL = "".concat(protocol, "//").concat(host); var DEV_SERVER_URL = "http://3d-test.onewo.com"; var envConstant = [{ BASEURL: "".concat(DEV_SERVER_URL, "/api"), // 基础接口路径 REDIRECTURL: "http://3d-login-test.onewo.com" // 登录过期重定向路径 }, { BASEURL: "".concat(serverURL, "/api"), REDIRECTURL: "http://3d-login-fat.onewo.com" }, { BASEURL: "".concat(serverURL, "/api"), REDIRECTURL: "https://3d-login.onewo.com" }]; function checkEnv() { switch (

High

Ai Review Evidence

Importing the bundle selects an external test API for every host other than two named Onewo hosts.

dist/index.umd.jsView on unpkg · L301

337axios.defaults.baseURL = checkEnv().BASEURL; // 获取cookie function getCookie(cname) { var arr, reg = new RegExp("(^| )" + cname + "=([^;]*)(;|$)"); // eslint-disable-next-line if (arr = document.cookie.match(reg)) return arr[2];else return null; } // http request 拦截器 axios.interceptors.request.use(function (config) { // 取accesstoken var accesstoken = getCookie("accesstoken"); // 设置request-header if (accesstoken) { config.headers["Authorization"] = accesstoken; config.headers["Access-Control-Allow-Origin"] = "*"; con

High

Ai Review Evidence

The request interceptor reads the accesstoken cookie and places it in two authentication headers.

dist/index.umd.jsView on unpkg · L337

391while (1) switch (_context.n) { case 0: params = _args.length > 0 && _args[0] !== undefined ? _args[0] : {}; return _context.a(2, axios({ url: '/base-role-[redacted]', method: 'post', data: params }));

High

Ai Review Evidence

The bundle posts administrator and role data through that configured client.

dist/index.umd.jsView on unpkg · L391

Findings

1 Critical3 High1 Medium1 Low

CriticalHardcoded Runtime Data Exfiltrationdist/index.umd.js

HighAi Review Evidencedist/index.umd.js

MediumNetwork

LowUrl Strings