registry / @attabot/complaint-app / 1.0.14

@attabot/complaint-app@1.0.14

Complaint Management UI package — atomic React components that run on the parent app's auth and API

AI Security Review

scanned 24d ago · by lpm-firewall-ai

The mounted UI can send complaint data and bearer credentials to hard-coded external AiraOps endpoints. The default receiver is active when the parent does not supply an API URL.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A consumer mounts the component and invokes its complaint or roles data operations without overriding the API URL.

Impact

An external service can receive the parent application's bearer or refresh token and submitted or retrieved complaint records.

Mechanism

Automatic bearer-token attachment to requests sent to hard-coded external APIs.

Attack narrative

The bundle initializes an external grievance API as its default base URL, reads a token from component input or a browser cookie, and adds it to every request. Its complaint CRUD helpers then transmit application records through that client, while a roles fetch uses another hard-coded AiraOps URL. This creates a credential and application-data disclosure path whenever a consumer uses the UI without explicitly overriding the endpoint.

AI rationale

The shipped code silently defaults privileged application requests to external hosts and automatically includes bearer credentials. This is concrete credential and data exfiltration behavior, despite the absence of lifecycle hooks.

Evidence

dist/complaint-app.js

Network endpoints2

api-grievance.airaops.comapi.airaops.com/api/v1/roles

Decision evidence

public snapshot

AI called this Malicious at 94.0% confidence as Malware with low false-positive risk.

Evidence for block

The client defaults to an undeclared external grievance API when no parent API URL is supplied.
Every request made by the client automatically attaches the supplied or cookie-derived bearer token.
The bundle sends complaint records to that client and separately hard-codes a roles request to another external host.
The README says the API URL defaults to an environment value, contradicting the shipped hard-coded default.

Evidence against

package.json has no install or lifecycle hook.
Network requests occur through UI/API operations rather than during package installation or import.
A parent can override the base URL and token through component properties.

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 512 KB of source, external domains: api-grievance.airaops.com, api.airaops.com, github.com, reactrouter.com, www.w3.org

Source & flagged code

6 flagged

dist/complaint-app.jsView file

Lines 3773-3835javascript

3773 "",

3774 nn({}, o, {

3775 expires: -1

3776 })

3777 );

3778 },

3779 withAttributes: function(a) {

3780 return wr(this.converter, nn({}, this.attributes, a));

3781 },

3782 withConverter: function(a) {

3783 return wr(nn({}, this.converter, a), this.attributes);

3784 }

3785 },

3786 {

3787 attributes: { value: Object.freeze(t) },

3788 converter: { value: Object.freeze(e) }

3789 }

3790 );

3791}

3792var _t = wr(md, { path: "/" });

3793const hd = { BASE_URL: "/", DEV: !1, MODE: "production", PROD: !0, SSR: !1 };

3794let it = "https://api-grievance.airaops.com", Yo = null;

3795try {

3796 if (typeof import.meta < "u" && hd?.VITE_API_URL)

3797 it = void 0;

3798 else {

3799 const e = typeof process < "u" ? process : null;

3800 e?.env?.VITE_API_URL && (it = e.env.VITE_API_URL);

3801 }

3802} catch {

3803}

3804const gd = (e) => {

High

Ai Review Evidence

The client defaults to an undeclared external grievance API when no parent API URL is supplied.

dist/complaint-app.jsView on unpkg · L3793

3805 it = e || "", V.defaults.baseURL = it;

3806}, Qo = (e) => {

3807 Yo = e || null;

3808}, yd = () => Yo || _t.get("token") || null, V = Y.create({

3809 baseURL: it,

3810 headers: {

3811 Accept: "application/json",

3812 "Content-Type": "application/json"

3813 }

3814});

3815V.interceptors.request.use((e) => {

3816 const t = yd();

3817 return e.headers = e.headers || {}, t ? e.headers.Authorization = `Bearer ${t}` : delete e.headers.Authorization, e;

3818});

High

Ai Review Evidence

Every request made by the client automatically attaches the supplied or cookie-derived bearer token.

dist/complaint-app.jsView on unpkg · L3815

3819let qn = !1, Vn = null;

3820V.interceptors.response.use(

3821 (e) => e,

3822 async (e) => {

3823 const t = e.config, n = e.response;

3824 if (n && (n.status === 401 || n.status === 402)) {

3825 const r = _t.get("refreshToken");

3826 if (r)

3827 try {

3828 qn || (qn = !0, Vn = Y.post(

3829 `${it}/api/v1/auth/refresh`,

3830 {},

3831 {

3832 headers: {

3833 Authorization: `Bearer ${r}`

3834 }

3835 }

Lines 4088-4128javascript

4088 types: "/api/v1/complaints/types",

4089 departments: "/api/v1/complaints/departments",

4090 departmentTree: "/api/v1/complaints/departments/tree",

4091 priorities: "/api/v1/complaints/priorities",

4092 workflows: "/api/v1/complaints/workflows",

Lines 4458-4498javascript

4458 e.details = {};

4459 },

4460 setId(e, t) {

4461 e.id = t.payload;

4462 },

4463 setIsEdit(e, t) {

4464 console.log("setIsEdit called with payload:", t.payload), e.isEdit = t.payload.data, console.log

•Browser cookie sent to a fixed external endpoint in dist/complaint-app.js: return e + " must be used within a data router. See https://reactrouter.com/v6/routers/picking-a-router."; e?.v7_startTransition === void 0 && na("v7_startTransition", "React Router will begin wrapping state updates in `React.startTransition` in v7", "https://reactrouter.com/v6/upgradin... return e + " must be used within a data router. See https://reactrouter.com/v6/routers/picking-a-router."; process.env.NODE_ENV !== "production" && ue(typeof URLSearchParams < "u", "You cannot use the `useSearchParams` hook in a browser that does not support the URLSearchParams API. If ... self instanceof WorkerGlobalScope && typeof self.importScripts == "function", Sc = Ir && window.location.href || "http://localhost", _c = /*

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/complaint-app.jsView on unpkg

dist/style.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/style.cssView on unpkg

Source & flagged code

6 flagged · loading source

dist/complaint-app.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/complaint-app.jsView on unpkg

3793const hd = { BASE_URL: "/", DEV: !1, MODE: "production", PROD: !0, SSR: !1 }; let it = "https://api-grievance.airaops.com", Yo = null; try { if (typeof import.meta < "u" && hd?.VITE_API_URL) it = void 0; else { const e = typeof process < "u" ? process : null; e?.env?.VITE_API_URL && (it = e.env.VITE_API_URL); } } catch { } const gd = (e) => { it = e || "", V.defaults.baseURL = it; }, Qo = (e) => { Yo = e || null; }, yd = () => Yo || _t.get("token") || null, V = Y.create({ baseURL: it,

High

Ai Review Evidence

The client defaults to an undeclared external grievance API when no parent API URL is supplied.

dist/complaint-app.jsView on unpkg · L3793

3815V.interceptors.request.use((e) => { const t = yd(); return e.headers = e.headers || {}, t ? e.headers.Authorization = `Bearer ${t}` : delete e.headers.Authorization, e; });

High

Ai Review Evidence

Every request made by the client automatically attaches the supplied or cookie-derived bearer token.

dist/complaint-app.jsView on unpkg · L3815

4108}), Kt = (e, t) => ({ list: ce( `complaint/${e}/list`, (n, { signal: r }) => V.get(t, { params: n, signal: r }) ), getById: ce( `complaint/${e}/getById`, (n, { signal: r }) => V.get(`${t}/${n}`, { signal: r }) ), create: ce( `complaint/${e}/create`, (n) => V.post(t, n) ), update: ce( `complaint/${e}/update`, ({ id: n, data: r }) => V.patch(`${t}/${n}`, r) ), remove: ce( `complaint/${e}/remove`, (n) => V.delete(`${t}/${n}`) )

High

Ai Review Evidence

The bundle sends complaint records to that client and separately hard-codes a roles request to another external host.

dist/complaint-app.jsView on unpkg · L4108

4478} = as.actions, $d = as.reducer, Ud = "https://api.airaops.com/api/v1/roles", Kn = te( "roles/fetchHallRoles", async (e, { rejectWithValue: t, signal: n }) => { try { const r = await V.get(Ud, { params: { page: 1, limit: 50 }, signal: n });

High

Ai Review Evidence

The bundle sends complaint records to that client and separately hard-codes a roles request to another external host.

dist/complaint-app.jsView on unpkg · L4478

dist/style.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/style.cssView on unpkg

Findings

1 Critical5 High3 Medium3 Low

CriticalHardcoded Runtime Data Exfiltrationdist/complaint-app.js

HighSemantic Analysis Limiteddist/style.css

HighAi Review Evidencedist/complaint-app.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @attabot/complaint-app@1.0.14.

See version security history for other recorded verdicts.

Avoid installing @attabot/complaint-app@1.0.14. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-14 12:03:51.468Z (UTC).