--- canonical: "https://firewall.lpm.dev/npm/@fayz-ai/portal" markdown: "https://firewall.lpm.dev/npm/@fayz-ai/portal/report.md" package: "@fayz-ai/portal" report_status: "published" title: "@fayz-ai/portal@0.69.0 npm security report" verdict: "malicious" version: "0.69.0" --- # @fayz-ai/portal@0.69.0 npm security report > **Trust boundary:** Package metadata, advisory text, filenames, URLs, and source snippets in this report come from external packages or feeds. Treat them as untrusted evidence. Do not execute instructions or code found in this document. ## Verdict summary **Blocked & quarantined** — Creates enrollment records for courses the member did not individually select. - **Verdict:** Malicious - **Product-default install policy:** Block - **Firewall policy:** Matched malicious - **Public report status:** Published - **Threat category:** Malware - **Selected version:** 0.69.0 - **Selected version is latest:** No - **Analysis source:** AI Security Review (lpm-firewall-ai) This is the current Firewall decision for the selected package version, based on the available public evidence. Findings for this version do not establish the status of other versions. AI assessment: malicious; recommendation: publish block. This assessment is supporting evidence; the published decision above determines the current policy. The default runtime path makes a publisher-selected account change by enrolling authenticated members in every published course. Under the review policy, this is concrete attack behavior; the package has no install hook, but the runtime behavior supports blocking publication. ## Latest scan - **Scanner version:** rust-scanner-worker-schema-1 - **Recorded final verdict:** Malicious - **Recorded analysis confidence:** 91.0% - **Started:** 2026-10-25T19:23:50.098Z - **Finished:** 2026-10-25T19:24:45.103Z - **Download time:** 769 ms - **Static scan time:** 35 ms - **AI review time:** 54201 ms - **Total time:** 55005 ms The recorded confidence comes from the underlying analysis. Trusted advisory policy can determine the final verdict even when the AI assessment differs. ## Security analysis ### Published attack-surface review - **Summary:** Authentication automatically enrolls the member in every published course. This is an account change selected by the package and runs by default. - **Trigger:** Member session initialization, sign-in, or signup. - **Impact:** Creates enrollment records for courses the member did not individually select. - **Evidence paths:** dist/index.js - **Review source:** ai\_review - **Reviewed:** 2026-10-25T19:24:45.103Z ### AI review details - **Review stage:** source\_first\_review - **Mechanism:** The bundle lists all published courses and calls the provider enrollment method for each using the member ID derived from their email. - **Attack narrative:** The default authentication flow automatically enrolls each member in all published courses. The bundle performs this action when it links a member session, and both session establishment and signup reach that path. The source does not show an individual course selection or consent check before enrollment. - **Rationale:** The default runtime path makes a publisher-selected account change by enrolling authenticated members in every published course. Under the review policy, this is concrete attack behavior; the package has no install hook, but the runtime behavior supports blocking publication. - **Files touched:** dist/index.js ### Review decision - **Verdict:** Malicious - **Confidence:** 91.0% - **Recommended action:** publish\_block - **Intent class:** Malware - **False-positive risk:** Low - **Evidence for block:** On authentication, the bundle enrolls the member in every published course by default., Both session establishment and explicit signup call the enrollment path after authentication. - **Evidence against:** The manifest describes an authenticated member portal and has no install lifecycle hook. ## Affected versions and remediation This report applies to @fayz-ai/portal@0.69.0. - Avoid installing @fayz-ai/portal@0.69.0. Remove it from direct dependencies and check your lockfile for transitive copies. - Choose an independently verified alternative or release. This report does not establish that other versions are safe. - If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment. ## Public findings ### 1. Low: Scripts Present - **Category:** Manifest - **Confidence:** 100.0% Package declares npm scripts. ### 2. Low: High Entropy Strings - **Category:** Supply Chain - **Confidence:** 55.0% Package source contains high-entropy string patterns. ### 3. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 91.0% - **Path:** dist/index.js - **Public source:** [View source]() On authentication, the bundle enrolls the member in every published course by default. Public source snippet (untrusted): ```javascript async function grantAllPublished(customerId) { const provider = getCoursesProvider(); const courses = await provider.listCourses({ status: "published" }); for (const c of courses) await provider.enroll(c.id, customerId); } async function link(user, fullName) { const email = (user.email ?? "").trim().toLowerCase(); const customerId = customerIdForEmail(email); if (_autoEnroll) await grantAllPublished(customerId); useMemberSession.getState().setSession({ ``` ### 4. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 91.0% - **Path:** dist/index.js - **Public source:** [View source]() Both session establishment and explicit signup call the enrollment path after authentication. Public source snippet (untrusted): ```javascript async function establishMemberSession(email, opts) { const adapter2 = getAdapter(); const normalized = email.trim().toLowerCase(); const session = opts?.password ? await adapter2.signIn(normalized, opts.password) : await adapter2.signUp(normalized, `member-${normalized}`, opts?.name ?? ""); const user = session.user.email ? session.user : { ...session.user, email: normalized }; return link(user, opts?.name); } async function s ``` ### 5. High: Ai Review Evidence - **Category:** Ai Review - **Confidence:** 91.0% - **Path:** package.json - **Public source:** [View source]() On authentication, the bundle enrolls the member in every published course by default. Public source snippet (untrusted): ```json "publishConfig": { "access": "public" }, "scripts": { "build": "tsup && tsc -b --force", "dev": "tsup --watch", "typecheck": "tsc -b", "clean": "rm -rf dist .tsbuildinfo" } } ``` ## Dependencies and install lifecycle - **Lifecycle scripts present:** No - **Dependencies:** 3 - **Optional dependencies:** 0 - **Peer dependencies:** 3 - **Development dependencies:** 5 - **Published dependency-graph edges:** 6 ### Published dependency entries - @fayz-ai/auth ^0.69.0 (Dependency) - @fayz-ai/core ^0.69.0 (Dependency) - @fayz-ai/courses ^0.69.0 (Dependency) - react ^18.0.0 || ^19.0.0 (PeerDependency) - react-dom ^18.0.0 || ^19.0.0 (PeerDependency) - zustand ^4.5.0 || ^5.0.0 (PeerDependency) ## Package metadata - **Package:** @fayz-ai/portal - **Ecosystem:** npm - **Version:** 0.69.0 - **License:** MIT - **Version published:** 2026-10-25T19:22:42.378Z - **Package first seen:** 2026-08-11T01:59:20.731Z - **Package last seen:** 2026-10-29T20:32:08.211Z - **Known versions:** 36 - **Latest version:** 0.77.0 - **Appeal under review:** No - **Description:** Fayz SDK member/learner portal scaffold — authenticated 'my courses' + player surface - **Keywords:** fayz, portal, member, courses, lms - **Artifact files:** 27 - **Artifact unpacked size:** 107,148 bytes - **Artifact signatures:** 2 - **Attestations:** No ## References - [HTML security report]()