@iflyrpa/actions@4.1.1
@iflyrpa/playwright 包中发布逻辑的具体实现
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe automatic forwarding of full failed-request URLs and error text to a fixed external endpoint is a concrete conditional data-exposure risk. The inspected manifest has no lifecycle hook and the source did not prove direct credential harvesting, so blocking as malware is not supported.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
A non-local HTTP request made by an invoked action fails and is not excluded by the retry and status checks.
Impact
URLs may contain caller-provided query data and error text may expose service details to the webhook operator; cookie and header disclosure was not confirmed.
Mechanism
The shared Http response interceptor constructs a report containing the request URL and error text, then posts it to the embedded webhook.
AI rationale
The automatic forwarding of full failed-request URLs and error text to a fixed external endpoint is a concrete conditional data-exposure risk. The inspected manifest has no lifecycle hook and the source did not prove direct credential harvesting, so blocking as malware is not supported.
Evidence
dist/bundle.js
Network endpoints1
open.xfchat.iflytek.com/open-apis/bot/v2/hook/d202c0dc-5af5-40bc-83ed-abc677caa4a5
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The manifest has no install lifecycle hook; its scripts are build and development commands.
- The bundle embeds a fixed external webhook endpoint.
- Every Http client installs a response interceptor, which reports selected request failures.
- Failure reports include the complete request URL and an error-message-derived field, then are posted to the fixed webhook.
Evidence against
- No child-process execution, install-time execution, or direct environment-secret harvesting was identified in the inspected entrypoint bundle.
- The reporting path activates only when an action request fails; static inspection did not establish that it sends cookies or request headers.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsObfuscatedUrlStrings
Source & flagged code
4 flagged · loading sourcedist/bundle.jsView file
9716if (_0x383dd4 === _0x16c0e0) break;
L9717: _0x46fb59['push'](_0x46fb59['shift']());
L9718: } catch (_0x4fc071) {
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/bundle.jsView on unpkg · L9716•matchType = malicious_source_fingerprint_signature
signature = b6026286b03d87ae
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @iflyrpa/actions@4.1.0
matchedPath = dist/bundle.js
matchedIdentity = npm:QGlmbHlycGEvYWN0aW9ucw:4.1.0
similarity = 1.000
shingleOverlap = 3
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/bundle.jsView on unpkg11818};
L11819: const _0x2055b1 = new function() {
L11820: eval('this[\'a\'] = 2;');
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/bundle.jsView on unpkg · L11818Findings
3 High3 Medium6 Low
HighObfuscated Payload Loaderdist/bundle.js
HighObfuscated
HighKnown Malware Source Fingerprint Signaturedist/bundle.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/bundle.js
LowWeak Cryptodist/bundle.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @iflyrpa/actions@4.1.1.
See all versions of @iflyrpa/actions for other recorded verdicts.
- Review the evidence and your use of @iflyrpa/actions@4.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.