@feathery/react@2.101.0
React library for Feathery
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource establishes conditional forwarding of an existing service credential to an unrestricted caller-selected endpoint. This warrants a capability warning, while the inspected evidence does not establish malware intent or justify blocking publication.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A caller uses AssistantChat with a different service destination, omits getJwt, and activates requests while the session cookie exists.
Impact
The selected endpoint could receive a credential intended for Feathery.
Mechanism
The component reads the browser cookie and adds it as X-Feathery-Session without validating the destination for that header.
AI rationale
Source establishes conditional forwarding of an existing service credential to an unrestricted caller-selected endpoint. This warrants a capability warning, while the inspected evidence does not establish malware intent or justify blocking publication.
Evidence
dist/fthry_AssistantChat.rni-LzLM.jscjs/fthry_index.CzPltp7A.jscjs/index.js
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- AssistantChat accepts a caller-selected baseUrl and copies the existing feathery_session_token cookie into headers when getJwt is absent.
- The chat transport uses baseUrl and those headers, then sends requests through fetch.
- The link-header wrapper returns existing request options unchanged for destinations outside its backend origins; it does not remove the session header.
- The main CommonJS entrypoint publicly exports AssistantChat.
- The built-in form caller selects the API origin, limiting exposure on that normal usage path.
Evidence against
- No preinstall, install, or postinstall hook or runtime self-dependency appears in package.json.
- No hidden unrelated recipient or malware intent was established.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
7 flaggeddist/fthry_AssistantChat.rni-LzLM.jsView file
10388// eslint-disable-next-line no-new-func
L10389: var importFromCdn = new Function('url', 'return import(url)');
L10390: var pdfjsPromise = null;
High
Eval
Package source references dynamic code evaluation.
dist/fthry_AssistantChat.rni-LzLM.jsView on unpkg · L10388dist/fthry_index.DAzjfWxd.jsView file
271L272: function commonjsRequire(path) {
L273: throw new Error('Could not dynamically require "' + path + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriate...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/fthry_index.DAzjfWxd.jsView on unpkg · L271cjs/fthry_index.CzPltp7A.jsView file
Findings
1 Critical4 High5 Medium6 Low
CriticalRemote Asset Decode Executeumd/AssistantChat.ffe51618203f111a02c8.js
HighEvaldist/fthry_AssistantChat.rni-LzLM.js
HighBrowser Session Account Hijackcjs/fthry_index.CzPltp7A.js
HighBase64 Obscured Urlcjs/fthry_index.CzPltp7A.js
HighSemantic Analysis Limitedcjs/fthry_index.CpJAJe-n.js#virtual:normalized:round1
MediumDynamic Requiredist/fthry_index.DAzjfWxd.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/fthry_index.C5ADJoTQ.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @feathery/react@2.101.0.
See all versions of @feathery/react for other recorded verdicts.
- Review the evidence and your use of @feathery/react@2.101.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.