@netlify/serverless-functions-api@2.28.1
The runtime API for Netlify Functions
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe optional instrumentation module uses default host resource detection, which collects machine identifiers and hostname data, then emits span resources to stdout. Its separate subpath and lack of a direct network endpoint reduce the concern, but the snapshot does not establish disclosure or controls for this host-identifying telemetry.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing `@netlify/serverless-functions-api/instrumentation.js`.
Impact
Host-identifying metadata may enter runtime logs. The reviewed source does not establish a direct network destination or whether downstream log collection transmits these records.
Mechanism
OpenTelemetry's default host detector reads machine identifiers and gathers hostname and architecture; the exporter serializes spans and their resource attributes to stdout.
AI rationale
The optional instrumentation module uses default host resource detection, which collects machine identifiers and hostname data, then emits span resources to stdout. Its separate subpath and lack of a direct network endpoint reduce the concern, but the snapshot does not establish disclosure or controls for this host-identifying telemetry.
Evidence
dist/telemetry/instrumentation.jspackage.json/etc/machine-id/var/lib/dbus/machine-id
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package exposes instrumentation as a separate `./instrumentation.js` subpath.
- The instrumentation SDK enables automatic resource detection by default, including the host detector.
- The host detector collects the machine hostname, architecture and platform-specific machine ID; Linux reads `/etc/machine-id` or `/var/lib/dbus/machine-id`.
- The exporter serializes span resources to stdout, and the SDK starts when the instrumentation module is imported.
Evidence against
- The package is a Netlify Functions runtime API, and the instrumentation entry is separate from its default `dist/index.js` entry.
- The exporter writes to stdout; no direct telemetry network endpoint appears in the reviewed module.
- The HTTP instrumentation is configured to skip headers.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
9 flaggeddist/telemetry/instrumentation.jsView file
13`,NS(a,e),`To resolve the conflict:
L14: `,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
High
Child Process
Package source references child process execution.
dist/telemetry/instrumentation.jsView on unpkg · L1314`,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
L16: `).join(`
High
1import{createRequire}from"module";const require=createRequire(import.meta.url);
L2: var y$=Object.create;var Gu=Object.defineProperty;var O$=Object.getOwnPropertyDescriptor;var A$=Object.getOwnPropertyNames;var R$=Object.getPrototypeOf,N$=Object.prototype.hasOwnPr...
L3: `),r.type!==e.type&&(t+=` - Type '${r.type}' does not match '${e.type}'
...
L13: `,NS(a,e),`To resolve the conflict:
L14: `,CS(a,e))}return o}}});var Yd,oU=d(()=>{Yd=class{constructor(e){this._backingStorages=e}record(e,t,o,s){this._backingStorages.forEach(a=>{a.record(e,t,o,s)})}}});var $d,Kd,sU=d(()...
L15: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let t=e.split('" = "');if(t.length===2)return t[1].slice(0,-1)}catch(r){S.debug(`error reading machine id: ${r}`)}return""}v...
Findings
7 High4 Medium6 Low
HighChild Processdist/telemetry/instrumentation.js
HighShelldist/telemetry/instrumentation.js
HighSame File Env Network Executiondist/index_server.js
HighCommand Output Exfiltrationdist/telemetry/instrumentation.js
HighObfuscated Payload Loaderdist/telemetry/instrumentation.js
HighCross File Remote Execution Contextdist/telemetry/instrumentation.js
HighTrigger Reachable Command Output Exfiltrationdist/telemetry/instrumentation.js
MediumDynamic Requiredist/index_server.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Affected versions and remediation
This report applies to @netlify/serverless-functions-api@2.28.1.
See all versions of @netlify/serverless-functions-api for other recorded verdicts.
- Review the evidence and your use of @netlify/serverless-functions-api@2.28.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.