@iflyrpa/actions@4.1.0: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@iflyrpa/actions@4.1.0: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

5 flagged · loading source

dist/bundle.jsView file

9716if (_0x383dd4 === _0x16c0e0) break; L9717: _0x46fb59['push'](_0x46fb59['shift']()); L9718: } catch (_0x4fc071) {

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/bundle.jsView on unpkg · L9716

11818}; L11819: const _0x2055b1 = new function() { L11820: eval('this[\'a\'] = 2;');

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/bundle.jsView on unpkg · L11818

55const buf = await toBuffer(stream); L56: const str = buf.toString('utf8'); L57: try { ... L69: const promise = new Promise((resolve, reject)=>{ L70: req1.once('response', resolve).once('error', reject).end(); L71: }); ... L624: } catch (error) {} L625: if (!r && 'undefined' != typeof process && 'env' in process) r = process.env.DEBUG; L626: return r; ... L797: const supportsColor = __webpack_require__("../../node_modules/.pnpm/supports-color@8.1.1/node_modules/supports-color/index.js"); L798: if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) exports1.colors = [ L799: 20,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/bundle.jsView on unpkg · L55

dist/index.mjsView file

4388const RPA_ERROR_WEBHOOK_URL = "https://open.xfchat.iflytek.com/open-apis/bot/v2/hook/d202c0dc-5af5-40bc-83ed-abc677caa4a5"; const ALARM_THROTTLE_MS = 60000; const lastSentAt = new Map(); const THROTTLE_MAP_MAX_KEYS = 500; const pruneThrottleMap = (now)=>{ if (lastSentAt.size < THROTTLE_MAP_MAX_KEYS) return; for (const [key, at] of lastSentAt)if (now - at >= ALARM_THROTTLE_MS) lastSentAt.delete(key); }; const postFeishuWebhook = (webhookUrl, payload)=>__WEBPACK_EXTERNAL_MODULE_axios__["default"].post(webhookUrl, payload, { headers: { "Content-Type": "application/json

High

Ai Review Evidence

A hard-coded external webhook receives runtime failure reports through axios.

dist/index.mjsView on unpkg · L4388

4476if (last && now - last < ALARM_THROTTLE_MS) return; pruneThrottleMap(now); lastSentAt.set(key, now); postFeishuWebhook(RPA_ERROR_WEBHOOK_URL, buildFeishuPostMessage(report)).catch(()=>{}); } catch {} };

High

Ai Review Evidence

A hard-coded external webhook receives runtime failure reports through axios.

dist/index.mjsView on unpkg · L4476

Source & flagged code

5 flagged

dist/bundle.jsView file

9716if (_0x383dd4 === _0x16c0e0) break; L9717: _0x46fb59['push'](_0x46fb59['shift']()); L9718: } catch (_0x4fc071) {

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/bundle.jsView on unpkg · L9716

11818}; L11819: const _0x2055b1 = new function() { L11820: eval('this[\'a\'] = 2;');

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/bundle.jsView on unpkg · L11818

55const buf = await toBuffer(stream); L56: const str = buf.toString('utf8'); L57: try { ... L69: const promise = new Promise((resolve, reject)=>{ L70: req1.once('response', resolve).once('error', reject).end(); L71: }); ... L624: } catch (error) {} L625: if (!r && 'undefined' != typeof process && 'env' in process) r = process.env.DEBUG; L626: return r; ... L797: const supportsColor = __webpack_require__("../../node_modules/.pnpm/supports-color@8.1.1/node_modules/supports-color/index.js"); L798: if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) exports1.colors = [ L799: 20,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/bundle.jsView on unpkg · L55

dist/index.mjsView file

4388const RPA_ERROR_WEBHOOK_URL = "https://open.xfchat.iflytek.com/open-apis/bot/v2/hook/d202c0dc-5af5-40bc-83ed-abc677caa4a5"; const ALARM_THROTTLE_MS = 60000; const lastSentAt = new Map(); const THROTTLE_MAP_MAX_KEYS = 500; const pruneThrottleMap = (now)=>{ if (lastSentAt.size < THROTTLE_MAP_MAX_KEYS) return; for (const [key, at] of lastSentAt)if (now - at >= ALARM_THROTTLE_MS) lastSentAt.delete(key); }; const postFeishuWebhook = (webhookUrl, payload)=>__WEBPACK_EXTERNAL_MODULE_axios__["default"].post(webhookUrl, payload, { headers: { "Content-Type": "application/json

High

Ai Review Evidence

A hard-coded external webhook receives runtime failure reports through axios.

dist/index.mjsView on unpkg · L4388

4476if (last && now - last < ALARM_THROTTLE_MS) return; pruneThrottleMap(now); lastSentAt.set(key, now); postFeishuWebhook(RPA_ERROR_WEBHOOK_URL, buildFeishuPostMessage(report)).catch(()=>{}); } catch {} };

High

Ai Review Evidence

A hard-coded external webhook receives runtime failure reports through axios.

dist/index.mjsView on unpkg · L4476