registry / @empiricalrun/playwright-utils / 0.65.0
@empiricalrun/playwright-utils@0.65.0
⚠ Under reviewPlaywright utils for test code repos of our customers
AI Security Review
scanned 8d ago · by lpm-firewall-aiNo confirmed attack is established in the inspected first-party paths: webhook behavior is API-invoked, telemetry is gated by the Empirical API key, and report uploads use returned signed URLs. Because the upload path imports @empiricalrun/r2-uploader and its source could not be resolved in this snapshot, the review cannot support a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A reporter invokes report upload.
Impact
The upload dependency remains unverified, so the full runtime path cannot be cleared.
Mechanism
The package requests signed upload URLs and imports @empiricalrun/r2-uploader, whose behavior could not be verified from this snapshot.
AI rationale
No confirmed attack is established in the inspected first-party paths: webhook behavior is API-invoked, telemetry is gated by the Empirical API key, and report uploads use returned signed URLs. Because the upload path imports @empiricalrun/r2-uploader and its source could not be resolved in this snapshot, the review cannot support a clean verdict.
Evidence
package.jsondist/reporter/presigned-upload.js
Network endpoints1
api.empirical.run
Decision evidence
public snapshotAI called this Manual Review at 82.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json declares @empiricalrun/r2-uploader at ^0.11.5, and the report uploader imports and calls it; its source could not be resolved in this snapshot.
- The inspected upload code requests report upload URLs and sends report files to the returned URLs.
- The webhook helper selects a provider when called, while telemetry returns without sending unless EMPIRICALRUN_API_KEY is set and then posts to the Empirical telemetry endpoint.
Evidence against
- The inspected manifest has no install lifecycle hook.
- The reviewed first-party paths show no confirmed credential theft or unrelated data transfer.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/reporter/local-test.jsView file
6exports.mergeForLocalTest = mergeForLocalTest;
L7: const child_process_1 = require("child_process");
L8: const path_1 = __importDefault(require("path"));
High
Child Process
Package source references child process execution.
dist/reporter/local-test.jsView on unpkg · L613try {
L14: (0, child_process_1.execFileSync)("npx", ["playwright", "merge-reports", outputDir, "--reporter", "html,json"], {
L15: cwd: currentWorkingDir,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/reporter/local-test.jsView on unpkg · L13dist/kv.jsView file
3exports.KVClient = void 0;
L4: const api_worker_client_1 = require("./api-worker-client");
L5: class KVClient {
Medium
Findings
3 Critical5 High4 Medium5 Low
CriticalCredential Exfiltrationdist/webhook.js
CriticalTrigger Reachable Dangerous Capabilitydist/webhook.js
CriticalPrevious Version Dangerous Deltadist/reporter/presigned-upload.js
HighChild Processdist/reporter/local-test.js
HighShell
HighTrigger Reachable Credential Exfiltrationdist/webhook.js
HighTrigger Reachable External Post Callbackdist/webhook.js
HighRuntime Package Installdist/reporter/local-test.js
MediumDynamic Requiredist/kv.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @empiricalrun/playwright-utils@0.65.0.
See all versions of @empiricalrun/playwright-utils for other recorded verdicts.
- Review the evidence and your use of @empiricalrun/playwright-utils@0.65.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.