registry / @netlify/serverless-functions-api / 2.26.0
@netlify/serverless-functions-api@2.26.0
The runtime API for Netlify Functions
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe flagged command execution belongs to host resource detection, and the telemetry exporter writes to the runtime console under a Netlify-specific marker. The telemetry behavior is tied to an explicit import, and the inspected lifecycle and runtime sources establish no concrete attack chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Importing the exported telemetry subpath activates the telemetry SDK.
Impact
Telemetry may include host metadata in runtime logs. The inspected source does not establish unrelated network transmission or malicious behavior.
Mechanism
Host detection reads an OS machine identifier, and the exporter serializes spans to the console; the inspected fetch instrumentation skips headers.
AI rationale
The flagged command execution belongs to host resource detection, and the telemetry exporter writes to the runtime console under a Netlify-specific marker. The telemetry behavior is tied to an explicit import, and the inspected lifecycle and runtime sources establish no concrete attack chain.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes telemetry as a separate import path and exports the server runtime entry.
- The package's prepare hook sets up Husky; prepublishOnly runs npm ci and tests. No install hook is declared.
- The inspected @netlify/types manifest declares build and test scripts but no install lifecycle hook.
- The server entry starts from Netlify runtime configuration and loads its configured function entry.
- The telemetry module detects host resources and reads the OS machine identifier as a host attribute.
- When imported, the telemetry module starts its SDK and writes serialized spans to the console with a Netlify-specific marker; its fetch instrumentation skips headers.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
10 flaggeddist/telemetry/instrumentation.jsView file
13`,NS(a,e),`To resolve the conflict:
L14: `,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
High
Child Process
Package source references child process execution.
dist/telemetry/instrumentation.jsView on unpkg · L1314`,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
L16: `).join(`
High
1import{createRequire}from"module";const require=createRequire(import.meta.url);
L2: var y$=Object.create;var Gu=Object.defineProperty;var O$=Object.getOwnPropertyDescriptor;var A$=Object.getOwnPropertyNames;var R$=Object.getPrototypeOf,N$=Object.prototype.hasOwnPr...
L3: `),r.type!==e.type&&(t+=` - Type '${r.type}' does not match '${e.type}'
...
L13: `,NS(a,e),`To resolve the conflict:
L14: `,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
Findings
1 Critical7 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index_server.js
HighChild Processdist/telemetry/instrumentation.js
HighShelldist/telemetry/instrumentation.js
HighSame File Env Network Executiondist/index_server.js
HighCommand Output Exfiltrationdist/telemetry/instrumentation.js
HighObfuscated Payload Loaderdist/telemetry/instrumentation.js
HighCross File Remote Execution Contextdist/telemetry/instrumentation.js
HighTrigger Reachable Command Output Exfiltrationdist/telemetry/instrumentation.js
MediumDynamic Requiredist/index_server.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @netlify/serverless-functions-api@2.26.0.
See all versions of @netlify/serverless-functions-api for other recorded verdicts.
- Review the evidence and your use of @netlify/serverless-functions-api@2.26.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.