registry / @pluno/product-agent-web / 0.1.282

@pluno/product-agent-web@0.1.282

Browser SDK and default widget for embedding Pluno Product Agent into customer web apps.

AI Security Review

scanned 21d ago · by lpm-firewall-ai

No confirmed malicious attack surface. This is a user-invoked Pluno Product Agent embed SDK: it talks to app.pluno.ai, exchanges a customer-supplied session token, and optionally observes host network calls as a documented product feature. Scanner labels for session hijack and limited semantic analysis track that embed behavior and a minified runtime bundle, not a hidden supply-chain payload.

Static reason

No blocking static signals were detected.

Trigger

A host app installs the package and calls the SDK init API or mounts the widget script.

Impact

No confirmed malicious impact

Mechanism

No confirmed malicious mechanism

AI rationale

Source shows a consented browser embed SDK with no install-time hooks and first-party Pluno endpoints. Credentialed token fetch, account APIs, and fetch/XHR capture are package-aligned Product Agent features rather than unconsented hijack.

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The widget POSTs the page origin and URL to a host token endpoint with credentials included.
After init, the widget patches fetch and XMLHttpRequest and forwards captured events to the Pluno backend.
The minified runtime CommonJS bundle includes account-state and secret-redaction strings, which limited automated analysis.

Evidence against

package.json has no preinstall, install, or postinstall hooks; only build, check, test, verify, and prepack.
Default backend is https://app.pluno.ai and traffic uses /api/product-agent embed and runtime routes.
Account reads and preference storage are Pluno Product Agent state, not host-account takeover.
Network capture, redaction, and in-page browser-tool JavaScript match the documented embed SDK.
Twitter, Instagram, and LinkedIn URLs are share-intent links; fonts.gstatic.com is a font file.

Behavioral surface

Source

Network

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 1.62 MB of source, external domains: app.pluno.ai, fonts.gstatic.com, pluno.ai, socket.io, twitter.com, www.instagram.com, www.linkedin.com, www.w3.org

Source & flagged code

8 flagged

dist/product-agent-widget.jsView file

122for (let i = 0; i < t.length; i++) L123: e = Math.imul(e ^ t.charCodeAt(i), 16777619) >>> 0, n = Math.imul(n ^ t.charCodeAt(i), 33) >>> 0; L124: return `selection:${e.toString(16)}:${n.toString(16)}`; ... L290: function $n(t) { L291: const e = t.replace(/\n\s*at\s[\s\S]*$/, "").replace(/-----BEGIN [^-]*PRIVATE KEY-----[\s\S]*?(?:-----END [^-]*PRIVATE KEY-----|$)/g, "[REDACTED]").replace(/\b(?:set-cookie|cookie)... L292: return e.length > nl ? `${e.slice(0, nl - 1)}…` : e; ... L3764: if ("uploadUrl" in p) { L3765: const f = await fetch(t.http.resolveUrl(p.uploadUrl), { method: p.uploadMethod, headers: p.uploadHeaders, body: u }); L3766: if (!f.ok) throw Object.assign(new Error("Attachment transfer failed."), { code: String(f.status) }); ... L4589: createUri(e, n = {}) { L4590: return

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/product-agent-widget.jsView on unpkg · L122

21703async function tv(t, e) { const n = await fetch(t, { method: "POST", credentials: "include", headers: { "content-type": "application/json" }, body: JSON.stringify({ origin: location.origin, url: location.href }),

Low

Ai Review Evidence

The widget POSTs the page origin and URL to a host token endpoint with credentials included.

dist/product-agent-widget.jsView on unpkg · L21703

10622readAccount: async (u) => { const d = this.clientRuntime.engine.getState().slices.account, p = this.options.accountLoader ? await this.options.accountLoader() : d.refusal ? null : this.options.initialAccount; if (!p) throw new Error("Account information is unavailable."); return s(), Lh(p, { id: u.userId, email: this.state.user?.email ?? null, name: this.state.user?.name ?? null, isSuperuser: !1 }, u.communityId);

Low

Ai Review Evidence

The widget POSTs the page origin and URL to a host token endpoint with credentials included.

dist/product-agent-widget.jsView on unpkg · L10622

11305this.networkCaptureCleanup || (this.networkCaptureCleanup = Xm((e) => { sb(e.url, this.options.backendUrl) || this.enqueueNetworkEvent(e); }));

Low

Ai Review Evidence

After init, the widget patches fetch and XMLHttpRequest and forwards captured events to the Pluno backend.

dist/product-agent-widget.jsView on unpkg · L11305

11617try { window.fetch = a; } catch { } try { XMLHttpRequest.prototype.open = r;

Low

Ai Review Evidence

After init, the widget patches fetch and XMLHttpRequest and forwards captured events to the Pluno backend.

dist/product-agent-widget.jsView on unpkg · L11617

dist/product-agent-runtime.cjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/product-agent-runtime.cjs#virtual:string-array:round1View on unpkg

package.jsonView file

Lines 1-53json

2 "name": "@pluno/product-agent-web",

3 "version": "0.1.282",

4 "description": "Browser SDK and default widget for embedding Pluno Product Agent into customer web apps.",

5 "license": "Apache-2.0",

Source & flagged code

8 flagged · loading source

dist/product-agent-widget.jsView file

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/product-agent-widget.jsView on unpkg · L122

Low

Ai Review Evidence

The widget POSTs the page origin and URL to a host token endpoint with credentials included.

dist/product-agent-widget.jsView on unpkg · L21703

Low

Ai Review Evidence

The widget POSTs the page origin and URL to a host token endpoint with credentials included.

dist/product-agent-widget.jsView on unpkg · L10622

11305this.networkCaptureCleanup || (this.networkCaptureCleanup = Xm((e) => { sb(e.url, this.options.backendUrl) || this.enqueueNetworkEvent(e); }));

Low

Ai Review Evidence

After init, the widget patches fetch and XMLHttpRequest and forwards captured events to the Pluno backend.

dist/product-agent-widget.jsView on unpkg · L11305

11617try { window.fetch = a; } catch { } try { XMLHttpRequest.prototype.open = r;

Low

Ai Review Evidence

After init, the widget patches fetch and XMLHttpRequest and forwards captured events to the Pluno backend.

dist/product-agent-widget.jsView on unpkg · L11617

dist/product-agent-runtime.cjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/product-agent-runtime.cjs#virtual:string-array:round1View on unpkg

package.jsonView file

1{ "name": "@pluno/product-agent-web", "version": "0.1.282", "description": "Browser SDK and default widget for embedding Pluno Product Agent into customer web apps.", "license": "Apache-2.0", "type": "module", "main": "dist/product-agent-sdk.js", "module": "dist/product-agent-sdk.js",

Low

Ai Review Evidence

The widget POSTs the page origin and URL to a host token endpoint with credentials included.

package.jsonView on unpkg · L1

33"verify:package": "node scripts/verify-package-contents.mjs && node scripts/verify-declaration-freshness.mjs", "prepack": "npm run verify:package" },

Low

Ai Review Evidence

The widget POSTs the page origin and URL to a host token endpoint with credentials included.

package.jsonView on unpkg · L33

Findings

2 High1 Medium9 Low

HighBrowser Session Account Hijackdist/product-agent-widget.js

HighSemantic Analysis Limiteddist/product-agent-runtime.cjs#virtual:string-array:round1

MediumNetwork

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowAi Review Evidencepackage.json

LowAi Review Evidencedist/product-agent-widget.js

Affected versions and remediation

This report applies to @pluno/product-agent-web@0.1.282.

See version security history for other recorded verdicts.

Review the evidence and your use of @pluno/product-agent-web@0.1.282 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-17 15:35:16.248Z (UTC).