registry / @empiricalrun/playwright-utils / 0.58.3
@empiricalrun/playwright-utils@0.58.3
Playwright utils for test code repos of our customers
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection shows a Playwright utility package with user-invoked, credential-gated provider and reporting integrations. The static credential-exfiltration and runtime-install labels are not supported as malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Consumer calls webhook/reporting helpers or configures the reporter.
Impact
No unconsented install-time execution or credential exfiltration established.
Mechanism
configured webhook, API, telemetry, and test-report operations
AI rationale
Source inspection shows a Playwright utility package with user-invoked, credential-gated provider and reporting integrations. The static credential-exfiltration and runtime-install labels are not supported as malicious behavior.
Evidence
package.jsondist/index.jsdist/webhook.jsdist/api-worker-client.jsdist/telemetry.jsdist/reporter/uploader.jsdist/reporter/local-test.jsdist/auth/index.js
Network endpoints3
webhook.siteapi.empirical.runreports-r2.empirical.run
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Manifest exposes library/reporting entrypoints and contains no lifecycle hook.
- Webhook calls occur only inside exported async helpers and require a configured provider key.
- API client sends its configured Empirical API key only as an Authorization header to its configured base URL.
- Report upload is disabled unless several explicit project, run, backend, and storage-credential environment variables are set.
- The child-process finding runs a fixed Playwright report-merge command in local-test flow.
Evidence against
- No install-time execution, hidden downloader, dynamic code execution, or persistence mechanism found.
- No evidence that arbitrary environment variables, auth-state files, or credentials are harvested and sent to an attacker-controlled endpoint.
- Scanner's webhook credential-exfiltration label conflates explicit authenticated provider API use with credential theft.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
8 flaggeddist/reporter/local-test.jsView file
6exports.mergeForLocalTest = mergeForLocalTest;
L7: const child_process_1 = require("child_process");
L8: const path_1 = __importDefault(require("path"));
High
Child Process
Package source references child process execution.
dist/reporter/local-test.jsView on unpkg · L613try {
L14: (0, child_process_1.execFileSync)("npx", ["playwright", "merge-reports", outputDir, "--reporter", "html,json"], {
L15: cwd: currentWorkingDir,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/reporter/local-test.jsView on unpkg · L13dist/kv.jsView file
3exports.KVClient = void 0;
L4: const api_worker_client_1 = require("./api-worker-client");
L5: class KVClient {
Medium
Findings
3 Critical5 High4 Medium5 Low
CriticalCredential Exfiltrationdist/webhook.js
CriticalTrigger Reachable Dangerous Capabilitydist/webhook.js
CriticalPrevious Version Dangerous Deltadist/reporter/harness.js
HighChild Processdist/reporter/local-test.js
HighShell
HighTrigger Reachable Credential Exfiltrationdist/webhook.js
HighTrigger Reachable External Post Callbackdist/webhook.js
HighRuntime Package Installdist/reporter/local-test.js
MediumDynamic Requiredist/kv.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @empiricalrun/playwright-utils@0.58.3.
See all versions of @empiricalrun/playwright-utils for other recorded verdicts.
- Review the evidence and your use of @empiricalrun/playwright-utils@0.58.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.