@feathery/react@2.77.1
React library for Feathery
AI Security Review
scanned 1mo ago · by lpm-firewall-aiCaller-selected destinations are not bound to the intended service when the component automatically forwards an existing session cookie. This warrants a credential-exposure warning rather than a malicious-package block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Open AssistantChat with a custom baseUrl, no getJwt callback, and an accessible Feathery session cookie.
Impact
A custom endpoint could receive a session credential intended for Feathery.
Mechanism
The component reads the cookie, adds it to X-Feathery-Session, and sends thread requests to a URL derived from baseUrl.
AI rationale
Caller-selected destinations are not bound to the intended service when the component automatically forwards an existing session cookie. This warrants a credential-exposure warning rather than a malicious-package block.
Evidence
dist/index.jsdist/fthry_AssistantChat.BvP-a78C.jsdist/fthry_index.BTuuYP90.js
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The public entrypoint exports AssistantChat, which accepts a caller-selected baseUrl.
- Without getJwt, chat headers copy the existing feathery_session_token cookie into X-Feathery-Session.
- Thread requests derive their destination from baseUrl and send those headers without a destination allowlist.
- Opening the chat triggers the thread-list request.
- The built-in form supplies the configured API origin, limiting the ordinary integration's exposure.
Evidence against
- No covert recipient or malicious intent was established.
- Supplying getJwt bypasses the automatic session-cookie forwarding.
Behavioral surface
DynamicRequireEnvironmentVarsEvalNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
7 flaggeddist/fthry_AssistantChat.BvP-a78C.jsView file
10383// eslint-disable-next-line no-new-func
L10384: var importFromCdn = new Function('url', 'return import(url)');
L10385: var pdfjsPromise = null;
High
Eval
Package source references dynamic code evaluation.
dist/fthry_AssistantChat.BvP-a78C.jsView on unpkg · L10383dist/fthry_index.D7Q-9Ib-.jsView file
271L272: function commonjsRequire(path) {
L273: throw new Error('Could not dynamically require "' + path + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriate...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/fthry_index.D7Q-9Ib-.jsView on unpkg · L271dist/fthry_index.BTuuYP90.jsView file
Findings
1 Critical5 High4 Medium5 Low
CriticalRemote Asset Decode Executeumd/AssistantChat.afd7a9e05b3798813e71.js
HighEvaldist/fthry_AssistantChat.BvP-a78C.js
HighBrowser Session Account Hijackdist/fthry_index.BTuuYP90.js
HighBase64 Obscured Urldist/fthry_index.BTuuYP90.js
HighSemantic Analysis Limitedcjs/fthry_index.1fWTrogH.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/fthry_index.BTuuYP90.js
MediumDynamic Requiredist/fthry_index.D7Q-9Ib-.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Low
Affected versions and remediation
This report applies to @feathery/react@2.77.1.
See all versions of @feathery/react for other recorded verdicts.
- Review the evidence and your use of @feathery/react@2.77.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.