registry / @alipay/ams-checkout / 2.0.28
@alipay/ams-checkout@2.0.28
Use _AMS CHECKOUT_ as an ES module.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiScanner critical hits on ams-checkout.js are first-party Antom payment and Alipay telemetry in a published checkout SDK, not a package-controlled steal channel. There is no registry install hook that mutates the consumer, and remaining primitives are husky prepare, webpack/lodash, AMD tracker load, and mock fixtures.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A merchant app imports the SDK and starts a checkout session.
Impact
No install-time mutation, secret harvesting, or remote payload execution beyond normal checkout and SDK logging was found.
Mechanism
Package-aligned payment gateway and first-party telemetry
AI rationale
Scanner critical hits on ams-checkout.js are first-party Antom payment and Alipay telemetry in a published checkout SDK, not a package-controlled steal channel. There is no registry install hook that mutates the consumer, and remaining primitives are husky prepare, webpack/lodash, AMD tracker load, and mock fixtures.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Checkout requests send payment payloads plus browser environment data to Alipay gateway hosts with cookies on by default.
- The published UMD bundle and logger post SDK telemetry to collect.alipay.com and imdap-sea.alipay.com.
- package.json includes a prepare script, and the bundle contains webpack Function("return this") plus mock fixture URLs.
Evidence against
- No preinstall, install, or postinstall hooks; prepare is only husky install || true and husky is a devDependency.
- README, exports, and hosts describe an Antom/Alipay checkout SDK talking to alipay.com, antom.com, Apple Pay, and PayPal.
- 100.88.104.107 and www.baidu.com appear only inside mock payment-session fixture strings, not as live receivers.
- Dynamic require is AMD iTracker loading and lodash util probing; no child_process, env harvesting, agent-config writes, or self-dependency.
Behavioral surface
DynamicRequireEvalNetwork
HighEntropyStrings
Source & flagged code
4 flaggedams-checkout.jsView file
5*/
L6: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var n=t();for(var r in n)("ob...
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
ams-checkout.jsView on unpkg · L55Trigger-reachable chain: manifest.exports -> ams-checkout.js
L5: */
L6: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var n=t();for(var r in n)("ob...
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
ams-checkout.jsView on unpkg · L55*/
L6: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var n=t();for(var r in n)("ob...
Medium
Dynamic Require
Findings
2 Critical3 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationams-checkout.js
CriticalTrigger Reachable Dangerous Capabilityams-checkout.js
MediumDynamic Requireams-checkout.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalams-checkout.js
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @alipay/ams-checkout@2.0.28.
See all versions of @alipay/ams-checkout for other recorded verdicts.
- Review the evidence and your use of @alipay/ams-checkout@2.0.28 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.