@pisell/pisellos@2.3.171
一个可扩展的前端模块化SDK框架，支持插件系统
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe inspected runtime source establishes default transmission of log context and payload data to fixed webhook destinations without a recipient-specific consent gate. This is concrete data disclosure behavior and supports blocking publication.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Runtime initialization and logging in ScanOrder when no logger configuration is provided.
Impact
Application and customer-related data placed in logger records can be disclosed to the webhook recipient without a recipient-specific consent setting in this path.
Mechanism
The default provider formats log records and submits them in HTTP POST requests to fixed Feishu webhooks.
Attack narrative
ScanOrder selects the Feishu logger by default and supplies fixed webhook URLs when caller configuration is absent. The logger serializes its context, record payload, and extra fields, then posts the resulting body to the webhook. This creates a reachable, default-on disclosure path for data included in those records.
AI rationale
The inspected runtime source establishes default transmission of log context and payload data to fixed webhook destinations without a recipient-specific consent gate. This is concrete data disclosure behavior and supports blocking publication.
Evidence
dist/solution/ScanOrder/index.jsdist/modules/ScanOrderLogger/providers/feishu.js
Network endpoints1
open.feishu.cn
Decision evidence
public snapshotAI called this Malicious at 94.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package exports `dist/index.js`, which exposes the SDK’s modules and solutions.
- During ScanOrder initialization, the logger defaults to the Feishu provider and uses fixed webhook URLs unless configuration is supplied.
- The logger’s outgoing message includes its context, log payload, and extra data.
- The Feishu provider sends the message body with an HTTP POST.
- The logger accepts records during ScanOrder execution, so the transfer is reachable through runtime use.
Evidence against
Behavioral surface
EnvironmentVarsEvalNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/plugins/window.jsView file
•matchType = normalized_sha256
matchedPackage = @pisell/pisellos@2.2.318
matchedPath = dist/plugins/window.js
matchedIdentity = npm:QHBpc2VsbC9waXNlbGxvcw:2.2.318
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/plugins/window.jsView on unpkg248} else {
L249: eval(handler);
L250: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/plugins/window.jsView on unpkg · L248dist/solution/ScanOrder/index.jsView file
•Default hardcoded logging webhook in dist/solution/ScanOrder/index.js:
this.store.scanOrderLogger.setProviderConfig(((_this$otherParams5 = this.otherParams) === null || _this$otherParams5 === void 0 ? void 0 : _this$otherParams5.scanOrderLoggerConfig)...
webhook: 'https://open.feishu.cn/open-apis/bot/v2/hook/216b3fe6-af98-424e-8706-f0471241a7ed',
errorHook: 'https://open.feishu.cn/open-apis/bot/v2/hook/015b7c2a-dd3c-4c30-9898-ef0f5253111f'
Rich runtime records posted to the webhook in [redacted].js:
var context = record.context || {};
text: "\u65E5\u5FD7\u5185\u5BB9: ".concat(safeStringify(record.payload), "\n")
text: "\u6269\u5C55\u4FE1\u606F: ".concat(safeStringify(record.extra), "\n")
return fetch(webhook, {
Reachable runtime logger calls in dist/modules/Order/index.js:
this.logger.addL
Findings
1 Critical3 High3 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/solution/ScanOrder/index.js
HighSemantic Analysis Limitedlib/solution/RegisterAndLogin/utils.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/plugins/window.js
HighAi Review Evidencepackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/plugins/window.js
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @pisell/pisellos@2.3.171.
See all versions of @pisell/pisellos for other recorded verdicts.
- Avoid installing @pisell/pisellos@2.3.171. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.