registry / @alicloud-panxi/aicoach-sdk / 1.1.49
@alicloud-panxi/aicoach-sdk@1.1.49
## 1. 安装 H5-SDK
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is an Alibaba Panxi AI Coach frontend SDK with no lifecycle hooks; scanner exfil and fingerprint hits come from bundled ARMS, axios, and RTC plus first-party error logs to an Alibaba Function Compute URL. That logging is user-invoked, vendor-aligned, and does not send cookies or hardcoded secrets to an unrelated recipient.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
The host app installs the package, imports it, and constructs the SDK with apiPath and a DOM container.
Impact
No confirmed malicious impact from inspected source.
Mechanism
User-invoked frontend coaching SDK with vendor telemetry
AI rationale
This is an Alibaba Panxi AI Coach frontend SDK with no lifecycle hooks; scanner exfil and fingerprint hits come from bundled ARMS, axios, and RTC plus first-party error logs to an Alibaba Function Compute URL. That logging is user-invoked, vendor-aligned, and does not send cookies or hardcoded secrets to an unrelated recipient.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json ships only dist and changelog.md, with build and publish scripts and no preinstall, install, or postinstall hooks.
- Import writes a PanxiRuntimeSDK name and version stamp; coaching UI, WebSocket, and HTTP run after the host constructs the SDK with apiPath and a container.
- On API or task errors the SDK posts env fields and request or response logs to a hardcoded Alibaba Function Compute monitor URL, without cookies or withCredentials.
- SLS access keys are obtained at runtime from slsrole.alicdn.com, not hardcoded.
- Browser API calls go to the caller apiPath or Aliyun console OpenAPI; cookie helpers are axios XSRF and console-component storage.
Evidence against
- The scanner labeled that default error log as credential exfiltration and matched a malware fingerprint on the minified dist bundles.
- Error logs can include userId, the page URL, and API request payloads.
- Semantic analysis did not finish on the four large dist files.
Behavioral surface
CryptoEnvironmentVarsEval
Source & flagged code
7 flagged · loading sourcedist/index.es.jsView file
•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 4
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.es.jsView on unpkg•matchType = malicious_source_fingerprint_signature
signature = ef59e263c45deb6f
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @alicloud-panxi/aicoach-sdk@1.1.48
matchedPath = dist/index.umd.js
matchedIdentity = npm:[redacted]:1.1.48
similarity = 1.000
shingleOverlap = 4
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.es.jsView on unpkg114patternName = generic_password
severity = medium
line = 114
Medium
Findings
1 Critical2 High7 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.umd.js
HighSemantic Analysis Limiteddist/index.es.js
HighKnown Malware Source Fingerprint Signaturedist/index.es.js
MediumSecret Patterndist/index.es.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/index.umd.vue.js
MediumSecret Patterndist/index.umd.js
MediumSecret Patterndist/index.es.vue.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @alicloud-panxi/aicoach-sdk@1.1.49.
See all versions of @alicloud-panxi/aicoach-sdk for other recorded verdicts.
- Review the evidence and your use of @alicloud-panxi/aicoach-sdk@1.1.49 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.