@pluno/product-agent-web@0.1.281: Clean npm security report | LPM Firewall

Loading npm security reports…

@pluno/product-agent-web@0.1.281: Clean npm security report | LPM Firewall

Source & flagged code

8 flagged · loading source

dist/product-agent-widget.jsView file

83for (let i = 0; i < t.length; i++) L84: e = Math.imul(e ^ t.charCodeAt(i), 16777619) >>> 0, n = Math.imul(n ^ t.charCodeAt(i), 33) >>> 0; L85: return `selection:${e.toString(16)}:${n.toString(16)}`; ... L251: function Fn(t) { L252: const e = t.replace(/\n\s*at\s[\s\S]*$/, "").replace(/-----BEGIN [^-]*PRIVATE KEY-----[\s\S]*?(?:-----END [^-]*PRIVATE KEY-----|$)/g, "[REDACTED]").replace(/\b(?:set-cookie|cookie)... L253: return e.length > el ? `${e.slice(0, el - 1)}…` : e; ... L3707: if ("uploadUrl" in p) { L3708: const f = await fetch(t.http.resolveUrl(p.uploadUrl), { method: p.uploadMethod, headers: p.uploadHeaders, body: u }); L3709: if (!f.ok) throw Object.assign(new Error("Attachment transfer failed."), { code: String(f.status) }); ... L4532: createUri(e, n = {}) { L4533: return e +

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/product-agent-widget.jsView on unpkg · L83

11254enableNetworkCapture() { this.networkCaptureCleanup || (this.networkCaptureCleanup = Gm((e) => { eb(e.url, this.options.backendUrl) || this.enqueueNetworkEvent(e); })); } enqueueNetworkEvent(e) { this.queuedNetworkEvents.length >= Um || (this.queuedNetworkEvents.push(Zy(e)), this.networkBatchTimer === null && (this.networkBatchTimer = window.setTimeout(() => { this.networkBatchTimer = null; const n = this.queuedNetworkEvents.splice(0, this.queuedNetworkEvents.length); n.length === 0 || this.socket?.readyState !== WebSocket.OPEN || this.sendNow({

Low

Ai Review Evidence

After the host mounts the widget, it wraps fetch and XMLHttpRequest and forwards capped host request metadata to the Pluno websocket as network.batch.

dist/product-agent-widget.jsView on unpkg · L11254

11568window.fetch = a; } catch { } try { XMLHttpRequest.prototype.open = r; } catch { } try { XMLHttpRequest.prototype.setRequestHeader = l; } catch { } try { XMLHttpRequest.prototype.send = c;

Low

Ai Review Evidence

After the host mounts the widget, it wraps fetch and XMLHttpRequest and forwards capped host request metadata to the Pluno websocket as network.batch.

dist/product-agent-widget.jsView on unpkg · L11568

11036}), this.conversationObservation?.wake(), this.[redacted](), this.flushQueuedClientEvents(), this.startHeartbeat(), this.runtimeHelperJavascript = Ey(e.runtimeHelpers)?.javascript ?? null;

Low

Ai Review Evidence

On websocket auth.ok the widget stores server-provided helper JavaScript and can run it with an async Function constructor.

dist/product-agent-widget.jsView on unpkg · L11036

11739async function Fl(t, e) { const n = Object.getPrototypeOf(async function() { }).constructor, i = t.timeoutMs ?? Qm, s = Date.now(), o = []; let a; const r = { log: console.log, info: console.info, warn: console.warn, error: console.error }, l = (c) => (...u) => { o.push({ level: c, args: u }), r[c](...u); }; console.log = l("log"), console.info = l("info"), console.warn = l("warn"), console.error = l("error"); try { const c = /* @__PURE__ */ Symbol("execute_code_timeout"), u = await Promise.race([ new n("sandboxFiles", t.javascript)(e?.value),

Low

Ai Review Evidence

On websocket auth.ok the widget stores server-provided helper JavaScript and can run it with an async Function constructor.

dist/product-agent-widget.jsView on unpkg · L11739

10573readAccount: async (u) => { const d = this.clientRuntime.engine.getState().slices.account, p = this.options.accountLoader ? await this.options.accountLoader() : d.refusal ? null : this.options.initialAccount; if (!p) throw new Error("Account information is unavailable."); return s(), Ph(p, { id: u.userId, email: this.state.user?.email ?? null, name: this.state.user?.name ?? null, isSuperuser: !1 }, u.communityId);

Low

Ai Review Evidence

Account reads use the integrator accountLoader or initialAccount plus Pluno user fields, which the scanner labeled as session hijack.

dist/product-agent-widget.jsView on unpkg · L10573

dist/product-agent-runtime.cjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/product-agent-runtime.cjs#virtual:string-array:round1View on unpkg

package.jsonView file

2"name": "@pluno/product-agent-web", "version": "0.1.281", "description": "Browser SDK and default widget for embedding Pluno Product Agent into customer web apps.", "license": "Apache-2.0", "type": "module", "main": "dist/product-agent-sdk.js", "module": "dist/product-agent-sdk.js",

Low

Suspicious Lifecycle Evidence

package.json has no preinstall, install, or postinstall hooks; scripts are build, check, test, and prepack verify only.

package.jsonView on unpkg · L2

Source & flagged code

8 flagged

dist/product-agent-widget.jsView file

83for (let i = 0; i < t.length; i++) L84: e = Math.imul(e ^ t.charCodeAt(i), 16777619) >>> 0, n = Math.imul(n ^ t.charCodeAt(i), 33) >>> 0; L85: return `selection:${e.toString(16)}:${n.toString(16)}`; ... L251: function Fn(t) { L252: const e = t.replace(/\n\s*at\s[\s\S]*$/, "").replace(/-----BEGIN [^-]*PRIVATE KEY-----[\s\S]*?(?:-----END [^-]*PRIVATE KEY-----|$)/g, "[REDACTED]").replace(/\b(?:set-cookie|cookie)... L253: return e.length > el ? `${e.slice(0, el - 1)}…` : e; ... L3707: if ("uploadUrl" in p) { L3708: const f = await fetch(t.http.resolveUrl(p.uploadUrl), { method: p.uploadMethod, headers: p.uploadHeaders, body: u }); L3709: if (!f.ok) throw Object.assign(new Error("Attachment transfer failed."), { code: String(f.status) }); ... L4532: createUri(e, n = {}) { L4533: return e +

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/product-agent-widget.jsView on unpkg · L83

11254enableNetworkCapture() { this.networkCaptureCleanup || (this.networkCaptureCleanup = Gm((e) => { eb(e.url, this.options.backendUrl) || this.enqueueNetworkEvent(e); })); } enqueueNetworkEvent(e) { this.queuedNetworkEvents.length >= Um || (this.queuedNetworkEvents.push(Zy(e)), this.networkBatchTimer === null && (this.networkBatchTimer = window.setTimeout(() => { this.networkBatchTimer = null; const n = this.queuedNetworkEvents.splice(0, this.queuedNetworkEvents.length); n.length === 0 || this.socket?.readyState !== WebSocket.OPEN || this.sendNow({

Low

Ai Review Evidence

After the host mounts the widget, it wraps fetch and XMLHttpRequest and forwards capped host request metadata to the Pluno websocket as network.batch.

dist/product-agent-widget.jsView on unpkg · L11254

11568window.fetch = a; } catch { } try { XMLHttpRequest.prototype.open = r; } catch { } try { XMLHttpRequest.prototype.setRequestHeader = l; } catch { } try { XMLHttpRequest.prototype.send = c;

Low

Ai Review Evidence

After the host mounts the widget, it wraps fetch and XMLHttpRequest and forwards capped host request metadata to the Pluno websocket as network.batch.

dist/product-agent-widget.jsView on unpkg · L11568

11036}), this.conversationObservation?.wake(), this.[redacted](), this.flushQueuedClientEvents(), this.startHeartbeat(), this.runtimeHelperJavascript = Ey(e.runtimeHelpers)?.javascript ?? null;

Low

Ai Review Evidence

On websocket auth.ok the widget stores server-provided helper JavaScript and can run it with an async Function constructor.

dist/product-agent-widget.jsView on unpkg · L11036

11739async function Fl(t, e) { const n = Object.getPrototypeOf(async function() { }).constructor, i = t.timeoutMs ?? Qm, s = Date.now(), o = []; let a; const r = { log: console.log, info: console.info, warn: console.warn, error: console.error }, l = (c) => (...u) => { o.push({ level: c, args: u }), r[c](...u); }; console.log = l("log"), console.info = l("info"), console.warn = l("warn"), console.error = l("error"); try { const c = /* @__PURE__ */ Symbol("execute_code_timeout"), u = await Promise.race([ new n("sandboxFiles", t.javascript)(e?.value),

Low

Ai Review Evidence

On websocket auth.ok the widget stores server-provided helper JavaScript and can run it with an async Function constructor.

dist/product-agent-widget.jsView on unpkg · L11739

10573readAccount: async (u) => { const d = this.clientRuntime.engine.getState().slices.account, p = this.options.accountLoader ? await this.options.accountLoader() : d.refusal ? null : this.options.initialAccount; if (!p) throw new Error("Account information is unavailable."); return s(), Ph(p, { id: u.userId, email: this.state.user?.email ?? null, name: this.state.user?.name ?? null, isSuperuser: !1 }, u.communityId);

Low

Ai Review Evidence

Account reads use the integrator accountLoader or initialAccount plus Pluno user fields, which the scanner labeled as session hijack.

dist/product-agent-widget.jsView on unpkg · L10573

dist/product-agent-runtime.cjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/product-agent-runtime.cjs#virtual:string-array:round1View on unpkg

package.jsonView file

Lines 1-22json

1{

2 "name": "@pluno/product-agent-web",

3 "version": "0.1.281",

4 "description": "Browser SDK and default widget for embedding Pluno Product Agent into customer web apps.",

5 "license": "Apache-2.0",