@feathery/react@2.102.0
React library for Feathery
AI Security Review
scanned 1mo ago · by lpm-firewall-aiInspected source shows service-session credential forwarding to a caller-selected destination without an enforced destination restriction on that credential. This warrants a warning for dangerous capability, while the evidence does not support malicious intent or publication blocking.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A caller supplies an unrelated baseUrl, omits getJwt, and opens the assistant while a Feathery session cookie exists.
Impact
The configured endpoint could receive the Feathery session credential if the browser permits the request.
Mechanism
The assistant copies the cookie into X-Feathery-Session and sends it with thread requests derived from baseUrl; the request wrapper does not remove caller-provided headers for unrelated origins.
AI rationale
Inspected source shows service-session credential forwarding to a caller-selected destination without an enforced destination restriction on that credential. This warrants a warning for dangerous capability, while the evidence does not support malicious intent or publication blocking.
Evidence
dist/index.jsdist/fthry_AssistantChat.DAealcHs.jscjs/fthry_index.KGNViWmn.js
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The public entrypoint exports AssistantChat, which accepts a caller-selected baseUrl.
- Without getJwt, AssistantChat reads the existing Feathery session cookie and adds it to request headers.
- Thread requests use the supplied baseUrl origin and send those headers through fetch.
- Opening the assistant activates thread fetching; supplying getJwt bypasses the cookie-based header branch.
- The request wrapper returns existing options unchanged for destinations outside its backend origin check.
Evidence against
- The built-in form caller selects the Feathery API origin.
- The inspected dynamic loader fetches a pinned PDF renderer for document previews; no concrete malware behavior was identified.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetry
Source & flagged code
7 flaggeddist/fthry_AssistantChat.DAealcHs.jsView file
10388// eslint-disable-next-line no-new-func
L10389: var importFromCdn = new Function('url', 'return import(url)');
L10390: var pdfjsPromise = null;
High
Eval
Package source references dynamic code evaluation.
dist/fthry_AssistantChat.DAealcHs.jsView on unpkg · L10388dist/fthry_index.CWgc_dqo.jsView file
3657try {
L3658: var util = require('util');
L3659: /* istanbul ignore next */
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/fthry_index.CWgc_dqo.jsView on unpkg · L3657cjs/fthry_index.KGNViWmn.jsView file
Findings
1 Critical4 High5 Medium6 Low
CriticalRemote Asset Decode Executeumd/AssistantChat.ffe51618203f111a02c8.js
HighEvaldist/fthry_AssistantChat.DAealcHs.js
HighBrowser Session Account Hijackcjs/fthry_index.KGNViWmn.js
HighBase64 Obscured Urlcjs/fthry_index.KGNViWmn.js
HighSemantic Analysis Limitedcjs/fthry_index.DQ3zeFaE.js#virtual:normalized:round1
MediumDynamic Requiredist/fthry_index.CWgc_dqo.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/fthry_index.BcLayI5V.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @feathery/react@2.102.0.
See all versions of @feathery/react for other recorded verdicts.
- Review the evidence and your use of @feathery/react@2.102.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.