@fayz-ai/portal@0.69.0
Fayz SDK member/learner portal scaffold — authenticated 'my courses' + player surface
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe default runtime path makes a publisher-selected account change by enrolling authenticated members in every published course. Under the review policy, this is concrete attack behavior; the package has no install hook, but the runtime behavior supports blocking publication.
Static reason
No blocking static signals were detected.
Trigger
Member session initialization, sign-in, or signup.
Impact
Creates enrollment records for courses the member did not individually select.
Mechanism
The bundle lists all published courses and calls the provider enrollment method for each using the member ID derived from their email.
Attack narrative
The default authentication flow automatically enrolls each member in all published courses. The bundle performs this action when it links a member session, and both session establishment and signup reach that path. The source does not show an individual course selection or consent check before enrollment.
AI rationale
The default runtime path makes a publisher-selected account change by enrolling authenticated members in every published course. Under the review policy, this is concrete attack behavior; the package has no install hook, but the runtime behavior supports blocking publication.
Evidence
dist/index.js
Decision evidence
public snapshotAI called this Malicious at 91.0% confidence as Malware with low false-positive risk.
Evidence for block
- On authentication, the bundle enrolls the member in every published course by default.
- Both session establishment and explicit signup call the enrollment path after authentication.
Evidence against
- The manifest describes an authenticated member portal and has no install lifecycle hook.
Behavioral surface
HighEntropyStrings
Source & flagged code
3 flaggeddist/index.jsView file
66async function grantAllPublished(customerId) {
const provider = getCoursesProvider();
const courses = await provider.listCourses({ status: "published" });
for (const c of courses) await provider.enroll(c.id, customerId);
}
async function link(user, fullName) {
const email = (user.email ?? "").trim().toLowerCase();
const customerId = customerIdForEmail(email);
if (_autoEnroll) await grantAllPublished(customerId);
useMemberSession.getState().setSession({
High
Ai Review Evidence
On authentication, the bundle enrolls the member in every published course by default.
dist/index.jsView on unpkg · L6678async function establishMemberSession(email, opts) {
const adapter2 = getAdapter();
const normalized = email.trim().toLowerCase();
const session = opts?.password ? await adapter2.signIn(normalized, opts.password) : await adapter2.signUp(normalized, `member-${normalized}`, opts?.name ?? "");
const user = session.user.email ? session.user : { ...session.user, email: normalized };
return link(user, opts?.name);
}
async function s
High
Ai Review Evidence
Both session establishment and explicit signup call the enrollment path after authentication.
dist/index.jsView on unpkg · L78package.jsonView file
Findings
3 High2 Low
HighAi Review Evidencedist/index.js
HighAi Review Evidencedist/index.js
HighAi Review Evidencepackage.json
LowScripts Present
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @fayz-ai/portal@0.69.0.
See all versions of @fayz-ai/portal for other recorded verdicts.
- Avoid installing @fayz-ai/portal@0.69.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.