registry / Credential exfiltration / @alicloud-panxi/aicoach-sdk
@alicloud-panxi/aicoach-sdk
## 1. 安装 H5-SDK
This report shows the evidence for @alicloud-panxi/aicoach-sdk@1.1.48. 1 of 2 known versions is blocked or flagged. The newest version, 1.1.49, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package contains a concrete credential-exfiltration path: sensitive runtime tokens are passed to a hardcoded external telemetry receiver. Absence of lifecycle hooks limits the trigger but does not remove the runtime exposure.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
RTC channel join or WebSocket creation failure while using the SDK
Impact
Exposes RTC/WebSocket tokens, session details, user identifier, URL, and browser metadata to the receiver.
Mechanism
Hardcoded telemetry POST containing runtime tokens and environment data
Attack narrative
The bundled runtime defines a telemetry helper that creates an environment record and POSTs it to a hardcoded endpoint. Error handlers invoke it with RTC `token` and WebSocket `channelToken` values, alongside channel/session and URL data. This occurs as part of normal runtime failure handling and has no documented opt-in or redaction.
AI rationale
The package contains a concrete credential-exfiltration path: sensitive runtime tokens are passed to a hardcoded external telemetry receiver. Absence of lifecycle hooks limits the trigger but does not remove the runtime exposure.
Evidence
dist/index.es.jspackage.jsonreadme.md
Network endpoints1
monitor-evobuniqan.cn-hangzhou.fcapp.run/log
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- Runtime telemetry collects user ID, user agent, current URL, version data, and arbitrary event logs.
- The telemetry routine POSTs records to a hardcoded external Function Compute endpoint.
- An RTC error handler includes its channel token in the telemetry log.
- A WebSocket error handler includes channelToken and its URL in telemetry.
Evidence against
- package.json has no npm lifecycle hooks.
- The observed collection is runtime error telemetry, not install-time execution.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
Source & flagged code
6 flagged · loading sourcedist/index.es.jsView file
•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 5
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.es.jsView on unpkg114patternName = generic_password
severity = medium
line = 114
matchedText = `},l.par...+`\r
Medium
dist/index.umd.vue.jsView file
•Browser cookie sent to a fixed external endpoint in dist/index.umd.vue.js:
`+c[u].replace(" at new "," at "),t.displayName&&a.includes("<anonymous>")&&(a=a.replace("<anonymous>",t.displayName)),"function"==typeof t&&k.set(t,a),a}while(1<=u&&0<=d);break}}}...
Check the top-level render call using <`+t+">."),j[t=r])||(j[t]=!0,r="",e&&e._owner&&e._owner!==o.current&&(r=" It was passed a child from "+h(e._owner.type)+"."),g(e),m('Each chil...
In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)})()}function ee(e){return"symbol"==typeof(e=((e,t)=>{if("object"!=typeof e||!e)return e;var r=e...
`}},776:function(e,t,r){var n,i=this&&this.__extends||(n=function(e,t){return(n=Object.setPrototypeOf||({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(
Findings
1 Critical1 High8 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.umd.vue.js
HighSemantic Analysis Limiteddist/index.es.js
MediumSecret Patterndist/index.es.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/index.umd.vue.js
MediumSecret Patterndist/index.umd.js
MediumSecret Patterndist/index.es.vue.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @alicloud-panxi/aicoach-sdk@1.1.48.
The versions list below shows the verdict for each recorded version.
- Avoid installing @alicloud-panxi/aicoach-sdk@1.1.48. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.