registry / @netlify/serverless-functions-api / 2.25.0
@netlify/serverless-functions-api@2.25.0
⚠ Under reviewThe runtime API for Netlify Functions
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected lifecycle scripts and runtime excerpts do not establish a concrete attack. However, the dependency manifest declares a main file that could not be read, preventing the required dependency-source coverage; manual review is appropriate while that source is unresolved.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Importing the separate instrumentation module starts OpenTelemetry tracing; the package prepare hook installs repository Husky hooks.
Impact
The missing declared dependency main file prevents a complete source review, so a clean verdict cannot be supported from this inspection.
Mechanism
The instrumentation bundle includes platform-specific machine identifier reads and initializes a tracing SDK. The inspected code does not establish that the identifier is sent to an unrelated recipient.
AI rationale
The inspected lifecycle scripts and runtime excerpts do not establish a concrete attack. However, the dependency manifest declares a main file that could not be read, preventing the required dependency-source coverage; manual review is appropriate while that source is unresolved.
Evidence
.lpm-dependency-evidence-f5da176c-da7c-41b6-8bf1-7045ffbb6102/0/npm-linux/dist/main.jspackage.jsondist/telemetry/instrumentation.jsdist/index_server.js.lpm-dependency-evidence-f5da176c-da7c-41b6-8bf1-7045ffbb6102/0/npm-linux/package.json
Decision evidence
public snapshotAI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package entrypoints expose the main API, server API, and a separate instrumentation module; its prepare hook installs repository Husky hooks.
- The instrumentation module reads a machine identifier through platform-specific commands and starts OpenTelemetry tracing when loaded.
- The declared @netlify/types dependency describes itself as TypeScript definitions and has no install lifecycle scripts, but its declared main file could not be read.
Evidence against
- The server bundle contains ordinary request and event handler selection logic.
- The instrumentation source shows service and Netlify site attributes used to initialize tracing.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
10 flaggeddist/telemetry/instrumentation.jsView file
13`,NS(a,e),`To resolve the conflict:
L14: `,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
High
Child Process
Package source references child process execution.
dist/telemetry/instrumentation.jsView on unpkg · L1314`,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
L16: `).join(`
High
1import{createRequire}from"module";const require=createRequire(import.meta.url);
L2: var y$=Object.create;var Gu=Object.defineProperty;var O$=Object.getOwnPropertyDescriptor;var A$=Object.getOwnPropertyNames;var R$=Object.getPrototypeOf,N$=Object.prototype.hasOwnPr...
L3: `),r.type!==e.type&&(t+=` - Type '${r.type}' does not match '${e.type}'
...
L13: `,NS(a,e),`To resolve the conflict:
L14: `,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
Findings
1 Critical7 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index_server.js
HighChild Processdist/telemetry/instrumentation.js
HighShelldist/telemetry/instrumentation.js
HighSame File Env Network Executiondist/index_server.js
HighCommand Output Exfiltrationdist/telemetry/instrumentation.js
HighObfuscated Payload Loaderdist/telemetry/instrumentation.js
HighCross File Remote Execution Contextdist/telemetry/instrumentation.js
HighTrigger Reachable Command Output Exfiltrationdist/telemetry/instrumentation.js
MediumDynamic Requiredist/index_server.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @netlify/serverless-functions-api@2.25.0.
See all versions of @netlify/serverless-functions-api for other recorded verdicts.
- Review the evidence and your use of @netlify/serverless-functions-api@2.25.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.