registry / @netlify/serverless-functions-api / 2.24.0
@netlify/serverless-functions-api@2.24.0
The runtime API for Netlify Functions
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe scanner's execution and obfuscation signals resolve to application loading, platform resource detection, and bundled library helpers. The active telemetry exporter logs locally, and inspected source provides no concrete malicious chain.
Static reason
One or more suspicious static signals were detected.
Trigger
Application loading invokes supplied handlers; importing instrumentation starts telemetry.
Impact
No malicious execution, covert network exfiltration, or agent control mutation was established.
Mechanism
Dynamic imports load application code, platform commands detect machine identifiers, and the active exporter logs spans.
AI rationale
The scanner's execution and obfuscation signals resolve to application loading, platform resource detection, and bundled library helpers. The active telemetry exporter logs locally, and inspected source provides no concrete malicious chain.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has development preparation and publishing scripts, with no preinstall, install, postinstall, or runtime self-dependency.
- dist/index_server.js imports the supplied application path and adapts its exported handler or server.
- The active telemetry exporter writes serialized spans to console; startup selects this exporter and skips request headers.
- Telemetry shell commands read platform machine identifiers for resource detection.
- The flagged eval reconstructs require for optional library loading, rather than decoding an executable payload.
- dist/index.js loads the caller-supplied function path within request handling.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
9 flaggeddist/telemetry/instrumentation.jsView file
13`,NS(a,e),`To resolve the conflict:
L14: `,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
High
Child Process
Package source references child process execution.
dist/telemetry/instrumentation.jsView on unpkg · L1314`,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
L16: `).join(`
High
1import{createRequire}from"module";const require=createRequire(import.meta.url);
L2: var y$=Object.create;var Gu=Object.defineProperty;var O$=Object.getOwnPropertyDescriptor;var A$=Object.getOwnPropertyNames;var R$=Object.getPrototypeOf,N$=Object.prototype.hasOwnPr...
L3: `),r.type!==e.type&&(t+=` - Type '${r.type}' does not match '${e.type}'
...
L13: `,NS(a,e),`To resolve the conflict:
L14: `,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
Findings
7 High4 Medium6 Low
HighChild Processdist/telemetry/instrumentation.js
HighShelldist/telemetry/instrumentation.js
HighSame File Env Network Executiondist/index_server.js
HighCommand Output Exfiltrationdist/telemetry/instrumentation.js
HighObfuscated Payload Loaderdist/telemetry/instrumentation.js
HighCross File Remote Execution Contextdist/telemetry/instrumentation.js
HighTrigger Reachable Command Output Exfiltrationdist/telemetry/instrumentation.js
MediumDynamic Requiredist/index_server.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Affected versions and remediation
This report applies to @netlify/serverless-functions-api@2.24.0.
See all versions of @netlify/serverless-functions-api for other recorded verdicts.
- Review the evidence and your use of @netlify/serverless-functions-api@2.24.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.