@feathery/react@2.75.0
React library for Feathery
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe package is not malicious by source evidence, but remote executable-module loading into the consumer origin remains a concrete unresolved risk.
Static reason
One or more suspicious static signals were detected.
Trigger
Render AssistantChat and process a PDF thumbnail.
Impact
A compromised or substituted CDN response could execute code in the host page origin.
Mechanism
Dynamic ESM import of pinned CDN-hosted PDF.js
AI rationale
The package is not malicious by source evidence, but remote executable-module loading into the consumer origin remains a concrete unresolved risk.
Evidence
package.jsoncjs/fthry_index.7g-oRPUe.jsdist/fthry_AssistantChat.C2gA5IYJ.js
Network endpoints2
cdn.jsdelivr.net/npm/pdfjs-dist@5.4.296/build/pdf.min.mjscdn.jsdelivr.net/npm/pdfjs-dist@5.4.296/build/pdf.worker.min.mjs
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- Assistant PDF-thumbnail code dynamically imports pinned pdfjs modules from jsDelivr at runtime.
- The assistant bundle is lazy-loaded only when its React component is rendered.
Evidence against
- No preinstall, install, or postinstall lifecycle script is declared.
- The observed Base64 uses decode uploaded data/JWT values; no hidden endpoint was found.
- No Node child-process, filesystem, credential-harvesting, or AI-agent configuration code was found in shipped entrypoints reviewed.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
5 flaggeddist/fthry_AssistantChat.C2gA5IYJ.jsView file
10383// eslint-disable-next-line no-new-func
L10384: var importFromCdn = new Function('url', 'return import(url)');
L10385: var pdfjsPromise = null;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/fthry_AssistantChat.C2gA5IYJ.jsView on unpkg · L1038310383// eslint-disable-next-line no-new-func
L10384: var importFromCdn = new Function('url', 'return import(url)');
L10385: var pdfjsPromise = null;
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/fthry_AssistantChat.C2gA5IYJ.jsView on unpkg · L10383dist/fthry_index.By2kSBZk.jsView file
304*/
L305: var from = String.fromCharCode;
L306:
...
L1444:
L1445: if (process.env.NODE_ENV !== "production") {
L1446: (function() {
...
L1795: /* eslint-disable */
L1796: // Inspired by https://github.com/garycourt/murmurhash-js
L1797: // Ported from https://github.[redacted].cpp#L37-L86
...
L4034: * Firefox 143 shipped Phase 2 fingerprinting protections (screen resolution, processor count, touch points)
L4035: * in Private Browsing and ETP Strict mode.
L4036: *
Findings
3 High4 Medium5 Low
HighBrowser Session Account Hijackdist/fthry_index.By2kSBZk.js
HighBase64 Obscured Urldist/fthry_index.By2kSBZk.js
HighSemantic Analysis Limitedcjs/fthry_index.7g-oRPUe.js
MediumDynamic Requiredist/fthry_AssistantChat.C2gA5IYJ.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/fthry_AssistantChat.C2gA5IYJ.js
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @feathery/react@2.75.0.
See all versions of @feathery/react for other recorded verdicts.
- Review the evidence and your use of @feathery/react@2.75.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.