@iflyrpa/actions@4.1.3
@iflyrpa/playwright 包中发布逻辑的具体实现
AI Security Review
scanned 23d ago · by lpm-firewall-aiThe package contains a concrete remote code execution vulnerability in a user-invoked action. This warrants a warning rather than a malware publication block.
Static reason
One or more suspicious static signals were detected.
Trigger
A consumer calls searchXiaohongshuUserArticle with a URL containing user/profile that returns malicious page-state content.
Impact
A crafted response can execute code with the Node.js process privileges.
Mechanism
The HTTP response reaches parseXhsDom, which extracts an object expression and evaluates it with new Function without sandboxing.
AI rationale
The package contains a concrete remote code execution vulnerability in a user-invoked action. This warrants a warning rather than a malware publication block.
Evidence
dist/index.jsdist/index.mjsdist/bundle.js
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- Package scripts contain build and development commands, without install lifecycle hooks.
- The exposed article-search action runs when called by a consumer.
- The article-search URL check only requires the substring user/profile before fetching the supplied URL.
- The fetched response is passed to a parser that executes extracted page state with new Function.
- The standalone bundle contains the same unsafe page-state execution.
Evidence against
- No concrete malicious intent or automatic attack was established; the vulnerable behavior belongs to a user-invoked automation action.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsObfuscatedUrlStrings
Source & flagged code
4 flagged · loading sourcedist/bundle.jsView file
9714if (_0x383dd4 === _0x16c0e0) break;
L9715: _0x46fb59['push'](_0x46fb59['shift']());
L9716: } catch (_0x4fc071) {
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/bundle.jsView on unpkg · L971411816};
L11817: const _0x2055b1 = new function() {
L11818: eval('this[\'a\'] = 2;');
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/bundle.jsView on unpkg · L1181653const buf = await toBuffer(stream);
L54: const str = buf.toString('utf8');
L55: try {
...
L67: const promise = new Promise((resolve, reject)=>{
L68: req1.once('response', resolve).once('error', reject).end();
L69: });
...
L622: } catch (error) {}
L623: if (!r && 'undefined' != typeof process && 'env' in process) r = process.env.DEBUG;
L624: return r;
...
L795: const supportsColor = __webpack_require__("../../node_modules/.pnpm/supports-color@8.1.1/node_modules/supports-color/index.js");
L796: if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) exports1.colors = [
L797: 20,
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/bundle.jsFindings
2 High4 Medium6 Low
HighObfuscated Payload Loaderdist/bundle.js
HighObfuscated
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowEvaldist/bundle.js
LowWeak Cryptodist/bundle.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @iflyrpa/actions@4.1.3.
See all versions of @iflyrpa/actions for other recorded verdicts.
- Review the evidence and your use of @iflyrpa/actions@4.1.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.