Loading npm security reports…

@herenit/prd-helper: Malicious npm security report (Block) | LPM Firewall

registry / @herenit/prd-helper / 0.2.4

@herenit/prd-helper@0.2.4

**HerenDesign 需求助手** 是一套为需求工作设计的 AI 协作规范与工具集。

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package distributes agent skills that silently make a second network upload of user-selected ZIP attachments. This transmits file contents to an unrelated hard-coded HTTP service after the requested issue-platform upload succeeds.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs `hrdp init`, then an installed Jira or TAPD skill uploads a ZIP attachment.

Impact

Confidential ZIP attachment contents can be exfiltrated without notification or separate consent.

Mechanism

Silent secondary ZIP upload to a hard-coded internal HTTP endpoint.

Attack narrative

`hrdp init` installs the bundled skills into AI-agent directories. When a user later supplies a ZIP attachment through the Jira or TAPD workflow, the helper reads that ZIP and posts it to `http://10.10.72.46:4874/upload` after the intended upload succeeds. Errors from this additional transmission are explicitly hidden, so the user receives no indication that their attachment was sent to a second service.

AI rationale

The hidden, hard-coded secondary upload of local attachment contents is concrete data exfiltration. Explicit user selection of an issue attachment does not consent to an undisclosed transmission to a separate endpoint.

Evidence

templates/workspace/skills/jira-ops/scripts/knowledge-base-upload.jstemplates/workspace/skills/tapd-ops/scripts/knowledge-base-upload.jstemplates/workspace/skills/tapd-ops/scripts/tapd-ops.jsdist/cli.js

Network endpoints1

Source & flagged code

5 flagged · loading source

vendor/heren-design-web-vue/heren-design.min.jsView file

20* @license MIT L21: */function hM(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,... L22: //# sourceMappingURL=heren-design.min.js.map

Low

Eval

Package source references a known benign dynamic code generation pattern.

vendor/heren-design-web-vue/heren-design.min.jsView on unpkg · L20

templates/workspace/skills/jira-ops/scripts/jira-client.jsView file

2L3: const fs = require('fs'); L4: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

templates/workspace/skills/jira-ops/scripts/jira-client.jsView on unpkg · L2

dist/lib/workspace-template.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. ath.join(targetroot, skillname); const protectedfiles = new map(); for (const protectedfile of protected_skill_files) { if (!protectedfile.startswith(`${skillname}/`)) { continue; } const protectedpath = path.join(targetroot, protectedfile); if (await isfile(protectedpath)) { protectedfiles.set(protectedfile.slice(sk[redacted] + 1), await readfile(protectedpath, 'utf8')); } } await rm(targetskillroot, { recursive: true, force: true }); created.push(...(await copydirectory(path.join(sourceroot, skillname), targetskillroot, path.posix.join(sk[redacted

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/lib/workspace-template.jsView on unpkg

templates/workspace/skills/jira-ops/scripts/knowledge-base-upload.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

templates/workspace/skills/jira-ops/scripts/knowledge-base-upload.js#virtual:normalized:round1View on unpkg

templates/workspace/skills/tapd-ops/scripts/tapd-ops.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @herenit/prd-helper@0.2.3 matchedIdentity = npm:QGhlcmVuaXQvcHJkLWhlbHBlcg:0.2.3 similarity = 0.571 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

templates/workspace/skills/tapd-ops/scripts/tapd-ops.jsView on unpkg

Source & flagged code

5 flagged

vendor/heren-design-web-vue/heren-design.min.jsView file

20* @license MIT L21: */function hM(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,... L22: //# sourceMappingURL=heren-design.min.js.map

Low

Eval

Package source references a known benign dynamic code generation pattern.

vendor/heren-design-web-vue/heren-design.min.jsView on unpkg · L20

templates/workspace/skills/jira-ops/scripts/jira-client.jsView file

Lines 1-22javascript

1'use strict';

2

3const fs = require('fs');

4const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

templates/workspace/skills/jira-ops/scripts/jira-client.jsView on unpkg · L2

5

6const DEFAULT_BASE_URL = 'http://10.8.76.234:9000/';

7

8function filled(value) {

9 return Boolean(value) && !String(value).trim().startsWith('<');

10}

11

12function normalizeBaseUrl(value) {

13 return (

14 String(value || DEFAULT_BASE_URL)

15 .trim()

16 .replace(/\/+$/, '') + '/'

17 );

18}

19

20function normalizeText(value) {

21 return String(value || '')

22 .trim()

dist/lib/workspace-template.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. ath.join(targetroot, skillname); const protectedfiles = new map(); for (const protectedfile of protected_skill_files) { if (!protectedfile.startswith(`${skillname}/`)) { continue; } const protectedpath = path.join(targetroot, protectedfile); if (await isfile(protectedpath)) { protectedfiles.set(protectedfile.slice(sk[redacted] + 1), await readfile(protectedpath, 'utf8')); } } await rm(targetskillroot, { recursive: true, force: true }); created.push(...(await copydirectory(path.join(sourceroot, skillname), targetskillroot, path.posix.join(sk[redacted

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/lib/workspace-template.jsView on unpkg

templates/workspace/skills/jira-ops/scripts/knowledge-base-upload.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

templates/workspace/skills/jira-ops/scripts/knowledge-base-upload.js#virtual:normalized:round1View on unpkg

templates/workspace/skills/tapd-ops/scripts/tapd-ops.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @herenit/prd-helper@0.2.3 matchedIdentity = npm:QGhlcmVuaXQvcHJkLWhlbHBlcg:0.2.3 similarity = 0.571 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

templates/workspace/skills/tapd-ops/scripts/tapd-ops.jsView on unpkg