@feedmepos/mf-inventory-portal@1.7.14
## Description
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe reachable refresh path forwards an existing session token to a package-selected host whose relationship to the service is unresolved. The source supports a warning, but does not establish malicious use or a confirmed unrelated recipient.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A backend request receives HTTP 401 and the retry limit has not been reached.
Impact
If the host is not an intended authentication recipient, the session token may be exposed to it.
Mechanism
The refresh handler posts the session token to account.feedmedev.cc, obtains an ID token, and retries the original request.
AI rationale
The reachable refresh path forwards an existing session token to a package-selected host whose relationship to the service is unresolved. The source supports a warning, but does not establish malicious use or a confirmed unrelated recipient.
Evidence
dist/app-KaSY7GIt.js
Network endpoints1
account.feedmedev.cc
Decision evidence
public snapshotAI called this Suspicious at 77.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exports dist/app.js, which imports dist/app-KaSY7GIt.js.
- The bundle sends the current session token to account.feedmedev.cc for token exchange.
- A backend 401 triggers refreshAuth with the current session token, then retries the request using the returned token.
- The source does not establish who controls account.feedmedev.cc or whether it is an intended authentication recipient.
Evidence against
- The token exchange runs as part of a 401 refresh flow and returns a token used to retry the failed request, consistent with an authentication function.
Behavioral surface
ChildProcessFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcedist/app-KaSY7GIt.jsView file
6var pu = (p, g, f) => Lh(p, typeof g != "symbol" ? g + "" : g, f), $u = (p, g, f) => g.has(p) || z_("Cannot " + f);
L7: var Ce = (p, g, f) => ($u(p, g, "read from private field"), f ? f.call(p) : g.get(p)), Ft = (p, g, f) => g.has(p) ? z_("Cannot add the same private member more than once") : g inst...
L8: import { isRef as Bh, ref as vi, shallowRef as Dh, watchEffect as Rh, computed as sn, h as q_, defineComponent as nm, createBlock as Vh, renderSlot as Ph, createCommentVNode as Nh,...
...
L40: usage: {
L41: body: "Cannot delete {subject} because it is linked in these items:",
L42: module: {
...
L6868: else {
L6869: if (n.charCodeAt(0) === 36)
L6870: throw new Error("Unknown operation " + n);
...
L7150: if (O && typeof O != "string")
L7151: throw new Error("Ability.can expects 3rd par
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/app-KaSY7GIt.jsView on unpkg · L66Trigger-reachable chain: manifest.module -> dist/app.js -> dist/app-KaSY7GIt.js
L6: var pu = (p, g, f) => Lh(p, typeof g != "symbol" ? g + "" : g, f), $u = (p, g, f) => g.has(p) || z_("Cannot " + f);
L7: var Ce = (p, g, f) => ($u(p, g, "read from private field"), f ? f.call(p) : g.get(p)), Ft = (p, g, f) => g.has(p) ? z_("Cannot add the same private member more than once") : g inst...
L8: import { isRef as Bh, ref as vi, shallowRef as Dh, watchEffect as Rh, computed as sn, h as q_, defineComponent as nm, createBlock as Vh, renderSlot as Ph, createCommentVNode as Nh,...
...
L40: usage: {
L41: body: "Cannot delete {subject} because it is linked in these items:",
L42: module: {
...
L6868: else {
L6869: if (n.charCodeAt(0) === 36)
L6870: throw new Error("Unknown operation " + n);
...
L7150: if
Findings
3 Critical2 High3 Medium6 Low
CriticalCredential Exfiltrationdist/app-KaSY7GIt.js
CriticalTrigger Reachable Dangerous Capabilitydist/app-KaSY7GIt.js
CriticalPrevious Version Dangerous Deltadist/inventory-core-dart.default-0h8jmf3F.js
HighTrigger Reachable Credential Exfiltrationdist/app-KaSY7GIt.js
HighSemantic Analysis Limiteddist/app-KaSY7GIt.js
MediumNetwork
MediumOversized Source Filedist/app-KaSY7GIt.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @feedmepos/mf-inventory-portal@1.7.14.
See all versions of @feedmepos/mf-inventory-portal for other recorded verdicts.
- Review the evidence and your use of @feedmepos/mf-inventory-portal@1.7.14 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.