@prosopo/procaptcha-frictionless@2.16.1: Suspicious npm security | LPM Firewall

Loading npm security reports…

@prosopo/procaptcha-frictionless@2.16.1: Suspicious npm security | LPM Firewall

Source & flagged code

5 flagged · loading source

dist/detectorLoader.jsView file

12}); L13: var defaultImporter = (url) => import( L14: /* @vite-ignore */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/detectorLoader.jsView on unpkg · L12

dist/cjs/AuthenticatedBadge.cjsView file

1package = @prosopo/procaptcha-frictionless; repositoryIdentity = captcha; dependency = @prosopo/procaptcha-common L1: let _prosopo_procaptcha_common = require("@prosopo/procaptcha-common"); L2: let _prosopo_types = require("@prosopo/types");

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/cjs/AuthenticatedBadge.cjsView on unpkg · L1

src/customDetectBot.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/customDetectBot.ts#virtual:normalized:round1View on unpkg

src/customDetectBot.tsView file

225const assigned = prefetchedResult?.assigned ?? (await withTimeout( providerApi.assignDetectorBundle(config.account.address), ASSIGN_TIMEOUT_MS, )); if (assigned.useProviderBundle && assigned.detectorScript) { // Deliberately untimed: this is a local parse + evaluate, so a timer // cannot rescue a stalled main thread — it can only throw away a bundle // we are already holding. providerDetect = await DetectorLoaderFromScript(assigned.detectorScript); detectorSessionId = assigned.detectorSessionId; }

Medium

Ai Review Evidence

The widget requests a per-session detector script from a dynamically selected provider.

src/customDetectBot.tsView on unpkg · L225

src/detectorLoader.tsView file

67const blobAttempt = (script: string): LoaderAttempt => { const url = URL.createObjectURL( new Blob([script], { type: "text/javascript" }), ); return { url, release: (): void => URL.revokeObjectURL(url) }; }; const dataAttempt = (script: string): LoaderAttempt => ({ url: `data:text/javascript;charset=utf-8,${encodeURIComponent(script)}`, release: (): void => undefined, }); /** Injection point for tests; real callers never pass this. */ export type ModuleImporter = (url: string) => Promise<unknown>; const defaultImporter: ModuleImporter = (url) => import(/* @vite-ignore */ /* webpack

Medium

Ai Review Evidence

It turns the received script into a blob or data URL and dynamically imports it, executing provider-controlled code.

src/detectorLoader.tsView on unpkg · L67

Source & flagged code

5 flagged

dist/detectorLoader.jsView file

Lines 1-32javascript

1//#region src/detectorLoader.ts

2var blobAttempt = (script) => {

3 const url = URL.createObjectURL(new Blob([script], { type: "text/javascript" }));

4 return {

5 url,

6 release: () => URL.revokeObjectURL(url)

7 };

8};

9var dataAttempt = (script) => ({

10 url: `data:text/javascript;charset=utf-8,${encodeURIComponent(script)}`,

11 release: () => void 0

12});

13var defaultImporter = (url) => import(

14 /* @vite-ignore */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/detectorLoader.jsView on unpkg · L12

15 /* webpackIgnore: true */

16 url

17);

18/**

19* Loads a detector from a provider-served obfuscated ESM string (the

20* per-session pool bundle). The module is self-contained, so a dynamic

21* `import()` yields its default export.

22*

23* A blob URL is tried first, then a `data:` URL. The two are gated by

24* different CSP directives and sites commonly allow one without the other — a

25* `script-src` of `*` matches neither, and a policy listing `data:` for

26* scripts and `blob:` only for workers blocks the blob path outright. Without

27* the fallback every session on such a site loses the detector, sends an empty

28* token, and can never pass frictionlessly.

29*

30* A blocked attempt logs a CSP violation before the import rejects. That noise

31* is the cost of recovering the session.

32*/

dist/cjs/AuthenticatedBadge.cjsView file

Lines 1-21javascript

1let _prosopo_procaptcha_common = require("@prosopo/procaptcha-common");

2let _prosopo_types = require("@prosopo/types");

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/cjs/AuthenticatedBadge.cjsView on unpkg · L1

3let react

src/customDetectBot.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/customDetectBot.ts#virtual:normalized:round1View on unpkg

src/customDetectBot.tsView file

Lines 205-245typescript

205 config.defaultEnvironment,

206 ipMode,

207 retryContext,

208 ));

209

210 const providerApi = new ProviderApi(

211 provider.provider.url,

212 config.account.address,

src/detectorLoader.tsView file

Lines 47-87typescript

47 clear: () => void;

48 };

49 clickTracker?: {

50 start: () => void;

51 stop: () => void;