registry / @empiricalrun/playwright-utils / 0.58.5
@empiricalrun/playwright-utils@0.58.5
Playwright utils for test code repos of our customers
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection found legitimate, opt-in Playwright utilities and reporting rather than install-time or covert attack behavior. Static findings reflect intended network, credential, child-process, and cached automation features.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Consumer imports and invokes a utility or configures the package as a Playwright fixture/reporter.
Impact
Expected test artifacts or provider data may be sent to configured package-aligned services.
Mechanism
configured test automation, reporting, and provider API access
AI rationale
Source inspection found legitimate, opt-in Playwright utilities and reporting rather than install-time or covert attack behavior. Static findings reflect intended network, credential, child-process, and cached automation features.
Evidence
package.jsondist/index.jsdist/webhook.jsdist/api-worker-client.jsdist/reporter/uploader.jsdist/reporter/empirical-reporter.jsdist/test/scripts/pw-locator-patch/dismiss-overlays/cache.js
Network endpoints3
api.empirical.runwebhook.siteinbox.empirical.run
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- Webhook helpers explicitly send only caller-supplied token/query data using configured provider credentials.
- The optional reporter uploads Playwright attachments and test-result metadata when configured.
- Overlay tooling executes code from its local .empiricalrun cache during an explicitly enabled test fixture.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Main import only re-exports utilities; no network or child-process action is invoked on import.
- Reporter upload is gated on configured run identifiers, storage backend, and credentials.
- No broad credential harvesting, foreign agent-config mutation, stealth persistence, or remote payload loading found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscation
Source & flagged code
8 flaggeddist/reporter/local-test.jsView file
6exports.mergeForLocalTest = mergeForLocalTest;
L7: const child_process_1 = require("child_process");
L8: const path_1 = __importDefault(require("path"));
High
Child Process
Package source references child process execution.
dist/reporter/local-test.jsView on unpkg · L613try {
L14: (0, child_process_1.execFileSync)("npx", ["playwright", "merge-reports", outputDir, "--reporter", "html,json"], {
L15: cwd: currentWorkingDir,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/reporter/local-test.jsView on unpkg · L13dist/kv.jsView file
3exports.KVClient = void 0;
L4: const api_worker_client_1 = require("./api-worker-client");
L5: class KVClient {
Medium
Findings
3 Critical5 High4 Medium5 Low
CriticalCredential Exfiltrationdist/webhook.js
CriticalTrigger Reachable Dangerous Capabilitydist/webhook.js
CriticalPrevious Version Dangerous Deltadist/reporter/harness.js
HighChild Processdist/reporter/local-test.js
HighShell
HighTrigger Reachable Credential Exfiltrationdist/webhook.js
HighTrigger Reachable External Post Callbackdist/webhook.js
HighRuntime Package Installdist/reporter/local-test.js
MediumDynamic Requiredist/kv.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @empiricalrun/playwright-utils@0.58.5.
See all versions of @empiricalrun/playwright-utils for other recorded verdicts.
- Review the evidence and your use of @empiricalrun/playwright-utils@0.58.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.