@pisell/pisellos@2.3.157
一个可扩展的前端模块化SDK框架，支持插件系统
AI Security Review
scanned 27d ago · by lpm-firewall-aiDefault ScanOrder logging posts operational method payloads to hardcoded Feishu bots, which is outbound data exposure rather than an install-time attack. The logger is an explicit, overridable product feature and there is no lifecycle self-install, credential theft, or obfuscated payload.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Host code calls ScanOrder initialize and later scan or order methods while scanOrderLogger is present and scanOrderLoggerConfig is omitted.
Impact
Scan, login, and order method arguments plus cache identifiers can leave the app to those Feishu bots. The host can override the endpoint.
Mechanism
initialize writes the default Feishu webhook and errorHook, then addScanOrderLog sends method payloads through the Feishu provider fetch POST.
AI rationale
Default ScanOrder logging posts operational method payloads to hardcoded Feishu bots, which is outbound data exposure rather than an install-time attack. The logger is an explicit, overridable product feature and there is no lifecycle self-install, credential theft, or obfuscated payload.
Evidence
dist/solution/ScanOrder/index.jsdist/modules/ScanOrderLogger/providers/feishu.js
Network endpoints2
open.feishu.cn/open-apis/bot/v2/hook/216b3fe6-af98-424e-8706-f0471241a7edopen.feishu.cn/open-apis/bot/v2/hook/015b7c2a-dd3c-4c30-9898-ef0f5253111f
Decision evidence
public snapshotAI called this Suspicious at 74.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- ScanOrder.initialize sets the Feishu logger to two hardcoded open.feishu.cn bot webhooks when the caller does not pass scanOrderLoggerConfig.
- The Feishu provider POSTs JSON log bodies that include context, payload, and extra to the configured webhook.
- logMethodStart forwards the method name and caller arguments into those logs for scan, login, and order operations.
- A webhook is treated as usable unless it is empty or contains the placeholder REPLACE_ME, so the hardcoded hooks are live.
Evidence against
- package.json has no preinstall, install, or postinstall hook; the only publish script is prepublishOnly running the build.
- The host can replace the logger provider and webhook through otherParams.
- lib/solution/RegisterAndLogin/utils.js only validates local inputs and maps OAuth icon URLs; it does not send credentials.
- dist/plugins/window.js calls eval only for a string timer handler when globalThis.setTimeout is missing.
Behavioral surface
EnvironmentVarsEvalNetwork
Source & flagged code
5 flagged · loading sourcedist/plugins/window.jsView file
•matchType = normalized_sha256
matchedPackage = @pisell/pisellos@2.2.312
matchedPath = dist/plugins/window.js
matchedIdentity = npm:QHBpc2VsbC9waXNlbGxvcw:2.2.312
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/plugins/window.jsView on unpkg248} else {
L249: eval(handler);
L250: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/plugins/window.jsView on unpkg · L248dist/solution/ScanOrder/index.jsView file
•Default hardcoded logging webhook in dist/solution/ScanOrder/index.js:
this.store.scanOrderLogger.setProviderConfig(((_this$otherParams5 = this.otherParams) === null || _this$otherParams5 === void 0 ? void 0 : _this$otherParams5.scanOrderLoggerConfig)...
webhook: 'https://open.feishu.cn/open-apis/bot/v2/hook/216b3fe6-af98-424e-8706-f0471241a7ed',
errorHook: 'https://open.feishu.cn/open-apis/bot/v2/hook/015b7c2a-dd3c-4c30-9898-ef0f5253111f'
Rich runtime records posted to the webhook in [redacted].js:
var context = record.context || {};
text: "\u65E5\u5FD7\u5185\u5BB9: ".concat(safeStringify(record.payload), "\n")
text: "\u6269\u5C55\u4FE1\u606F: ".concat(safeStringify(record.extra), "\n")
return fetch(webhook, {
Reachable runtime logger calls in dist/modules/Order/index.js:
this.logger.addL
Findings
1 Critical2 High4 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/solution/ScanOrder/index.js
HighSemantic Analysis Limitedlib/solution/RegisterAndLogin/utils.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/plugins/window.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/solution/ScanOrder/index.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/plugins/window.js
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @pisell/pisellos@2.3.157.
See all versions of @pisell/pisellos for other recorded verdicts.
- Review the evidence and your use of @pisell/pisellos@2.3.157 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.