@prosopo/procaptcha-frictionless@2.16.2: Malicious npm security | LPM Firewall

Loading npm security reports…

@prosopo/procaptcha-frictionless@2.16.2: Malicious npm security | LPM Firewall

Source & flagged code

5 flagged · loading source

dist/detectorLoader.jsView file

12}); L13: var defaultImporter = (url) => import( L14: /* @vite-ignore */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/detectorLoader.jsView on unpkg · L12

dist/cjs/AuthenticatedBadge.cjsView file

1package = @prosopo/procaptcha-frictionless; repositoryIdentity = captcha; dependency = @prosopo/procaptcha-common L1: let _prosopo_procaptcha_common = require("@prosopo/procaptcha-common"); L2: let _prosopo_types = require("@prosopo/types");

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/cjs/AuthenticatedBadge.cjsView on unpkg · L1

src/customDetectBot.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/customDetectBot.ts#virtual:normalized:round1View on unpkg

src/customDetectBot.tsView file

304const detect: DetectorType = providerDetect; const detectionResult = await detect(container, restartFn, () => ext.getAccount(config), );

High

Ai Review Evidence

The imported provider code is invoked in the host page with the widget container and an account callback.

src/customDetectBot.tsView on unpkg · L304

src/detectorLoader.tsView file

100export const DetectorLoaderFromScript = async ( script: string, importModule: ModuleImporter = defaultImporter, ): Promise<DetectorType> => { let lastError: unknown = new Error("no loader attempt ran"); for (const build of [blobAttempt, dataAttempt]) { let attempt: LoaderAttempt | undefined; try { attempt = build(script); const mod = (await importModule(attempt.url)) as { default: DetectorType; }; return mod.default; } catch (err) { lastError = err; } finally { attempt?.release(); } } throw lastError; }

High

Ai Review Evidence

The loader turns supplied text into blob and data JavaScript URLs, then dynamically imports it.

src/detectorLoader.tsView on unpkg · L100

Source & flagged code

5 flagged

dist/detectorLoader.jsView file

Lines 1-32javascript

1//#region src/detectorLoader.ts

2var blobAttempt = (script) => {

3 const url = URL.createObjectURL(new Blob([script], { type: "text/javascript" }));

4 return {

5 url,

6 release: () => URL.revokeObjectURL(url)

7 };

8};

9var dataAttempt = (script) => ({

10 url: `data:text/javascript;charset=utf-8,${encodeURIComponent(script)}`,

11 release: () => void 0

12});

13var defaultImporter = (url) => import(

14 /* @vite-ignore */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/detectorLoader.jsView on unpkg · L12

15 /* webpackIgnore: true */

16 url

17);

18/**

19* Loads a detector from a provider-served obfuscated ESM string (the

20* per-session pool bundle). The module is self-contained, so a dynamic

21* `import()` yields its default export.

22*

23* A blob URL is tried first, then a `data:` URL. The two are gated by

24* different CSP directives and sites commonly allow one without the other — a

25* `script-src` of `*` matches neither, and a policy listing `data:` for

26* scripts and `blob:` only for workers blocks the blob path outright. Without

27* the fallback every session on such a site loses the detector, sends an empty

28* token, and can never pass frictionlessly.

29*

30* A blocked attempt logs a CSP violation before the import rejects. That noise

31* is the cost of recovering the session.

32*/

dist/cjs/AuthenticatedBadge.cjsView file

Lines 1-21javascript

1let _prosopo_procaptcha_common = require("@prosopo/procaptcha-common");

2let _prosopo_types = require("@prosopo/types");

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/cjs/AuthenticatedBadge.cjsView on unpkg · L1

3let react

src/customDetectBot.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/customDetectBot.ts#virtual:normalized:round1View on unpkg

src/customDetectBot.tsView file

Lines 284-324typescript

284 credentials: "omit",

285 keepalive: true,

286 cache: "no-store",

287 }).catch(() => undefined);

288

src/detectorLoader.tsView file

Lines 80-120typescript

80export type ModuleImporter = (url: string) => Promise<unknown>;

81

82const defaultImporter: ModuleImporter