@aiscene/aiserver@2.0.8: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@aiscene/aiserver@2.0.8: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

dist/.envView file

32patternName = blocked_file severity = critical blockedFile = dist/.env redactedSecretContext = secretLikeLines = 4 L32: OPENAI_API_KEY=<redacted:0 empty> L47: MIDSCENE_MODEL_API_KEY=<redacted:39 token-like> L48: MIDSCENE_MODEL_NAME=<redacted:29 token-like> L49: MIDSCENE_MODEL_FAMILY=<redacted:22 token-like>

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/.envView on unpkg · L32

dist/task/guada-browser-rpc-client.jsView file

484if (message.type !== 'command') return; const command = message; const startedAt = Date.now(); logger.info(`Browser RPC command received: id=${command.id}, method=${command.method}, params=${this.summarizeParams(command.params || {})}`); try { const result = await this.withTimeout(this.executor.execute(command.method, command.params || {}), this.commandTimeoutMs, `Browser RPC command timeout after ${this.commandTimeoutMs}ms: ${command.method}`);

Medium

Ai Review Evidence

At runtime it opens a long-lived WebSocket channel and executes received command messages.

dist/task/guada-browser-rpc-client.jsView on unpkg · L484

278async runJs(params) { const record = this.getWindow(params.window_id || params.windowId); if (!params.code) throw new Error('code is required'); const result = await record.page.evaluate(async (code) => { const fn = new Function(`return (async () => { ${code} })();`); return await fn(); }, String(params.code));

Medium

Ai Review Evidence

A remotely selected browser_run_js method evaluates supplied code in an active browser page.

dist/task/guada-browser-rpc-client.jsView on unpkg · L278

282const result = await record.page.evaluate(async (code) => { L283: const fn = new Function(`return (async () => { ${code} })();`); L284: return await fn();

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/task/guada-browser-rpc-client.jsView on unpkg · L282

dist/executor/ios-wda-manager.jsView file

1import { spawn } from 'child_process'; L2: import fs from 'fs'; L3: import net from 'net'; L4: import os from 'os'; ... L53: try { L54: const { stdout } = await execFileText(findExecutable('idevice_id'), ['-l'], 10_000); L55: return stdout ... L118: this.log = options.log || (() => undefined); L119: const logDir = path.join(process.cwd(), 'logs'); L120: fs.mkdirSync(logDir, { recursive: true }); ... L181: }); L182: child.stdin.end();

High

Remote System File Write

Source writes bytes from a remote response into a privileged operating-system path.

dist/executor/ios-wda-manager.jsView on unpkg · L1

dist/index.jsView file

103// 10. Start Guada AI online batch polling. // This is separate from the nethp-test execution queue poller above. guadaOnlineBatchPoller.start(config.task, this.debugWsServer); logger.info('Guada online batch polling service started'); // 11. Start Guada browser RPC long-lived channel. // This is for ordinary browser tools, not test-case execution. guadaBrowserRpcClient.start(config.task); logger.info('Guada browser RPC client started');

Medium

Stripped Provenance Metadata

The main executable starts this remote browser RPC client after node authorization.

dist/index.jsView on unpkg · L103

Source & flagged code

6 flagged

dist/.envView file

Lines 12-49text

12AISERVER_TASK_POLL_INTERVAL=3000

13AISERVER_TASK_API_URL=http://nethp-test.jd.com

14AISERVER_TASK_MAX_CONCURRENT=3

15AISERVER_TASK_TIMEOUT=1200000

16

17# Node

18AISERVER_NODE_PORT=8002

19AISERVER_NODE_TYPE=executor

20AISERVER_NODE_VERSION=1.0.0

21AISERVER_NODE_ENVIRONMENT=prod

22AISERVER_NODE_WEIGHT=1

23AISERVER_NODE_SUPPORTED_TAGS=android,ios,web

24AISERVER_NODE_REGION=

25AISERVER_NODE_DESCRIPTION=

26AISERVER_NODE_REGISTER_URL=http://nethp-test.jd.com/rest/execution-nodes/register

27AISERVER_NODE_HEARTBEAT_URL=http://nethp-test.jd.com/rest/execution-nodes/heartbeat

28AISERVER_NODE_HEARTBEAT_INTERVAL=30000

29

30# AI

31OPENAI_BASE_URL=

32OPENAI_API_KEY=

33MIDSCENE_MODEL_NAME=

34MIDSCENE_USE_QWEN3_VL=1

35

36# Storage

37AISERVER_DB_PATH=./data/aiserver.db

38

39# Callback

40AISERVER_STATUS_UPDATE_URL=http://nethp-test.jd.com/rest/execution-queue/tasks

41AISERVER_REPORT_UPLOAD_URL=http://nethp-test.jd.com/rest/execution-callback/result-file

42AISERVER_DEVICE_HEARTBEAT_URL=http://nethp-test.jd.com/rest/mobile-devices/heartbeat

43AISERVER_DEVICE_STATUS_UPDATE_URL=http://nethp-test.jd.com/rest/mobile-devices

44

45

46MIDSCENE_MODEL_BASE_URL=https://modelservice.jdcloud.com/v1

47MIDSCENE_MODEL_API_KEY=pk-485b2b56-7334-4bed-bd74-09bb42ca3baf

48MIDSCENE_MODEL_NAME=doubao-seed-1-6-vision-250815

49MIDSCENE_MODEL_FAMILY=vlm-ui-tars-doubao-1.5

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/.envView on unpkg · L32

dist/task/guada-browser-rpc-client.jsView file

Lines 258-302javascript

258 title: await record.page.title(),

259 url: record.page.url(),

260 elements,

261 };

262 }

263 async click(params) {

264

dist/executor/ios-wda-manager.jsView file

Lines 1-21javascript

1import { spawn } from 'child_process';

2import fs from 'fs';

3import net from 'net';

4import os from 'os';

dist/index.jsView file

Lines 83-123javascript

83 await this.scrcpyServer.start();

84 config.scrcpy.port = this.scrcpyServer.getPort();

85 config.node.configInfo = {

86 ...config.node.configInfo,

87 scrcpyPort: config.scrcpy.port,