registry / @roll-agent/browser-use-agent / 0.27.3
@roll-agent/browser-use-agent@0.27.3
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest and runtime source show no install hook or confirmed attack behavior; the shell calls query display geometry, and the model request uses configured credentials for its API. Although candidate and message telemetry helpers target a fixed-default host, source searches found no activation path for them in this bundle.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
The package entrypoint runs as the browser-use agent runtime; no trigger for the recruitment event helpers was found.
Impact
No confirmed credential theft, data exfiltration, or destructive behavior was established.
Mechanism
The inspected process calls query local display dimensions, and the model request uses a configured API key. The event sender requires configuration but has no reachable caller in the bundle.
AI rationale
The manifest and runtime source show no install hook or confirmed attack behavior; the shell calls query display geometry, and the model request uses configured credentials for its API. Although candidate and message telemetry helpers target a fixed-default host, source searches found no activation path for them in this bundle.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest selects dist/index.js as the runtime entrypoint and lists no preinstall, install, or postinstall hook.
- The runtime child-process calls query local display geometry for browser window placement, with timeouts.
- The model API request sends model state and questions to api.typesafe.ai using a configured API key.
- The recruitment event sender requires an API token and agent ID; source searches found no call sites for its event helper functions in the bundle.
- The prepared browser dependency is a same-vendor browser runtime; its source imports child-process and browser automation components.
- The reply-authority client requires configured service URL and bearer token; the SDK passes model requests to its connected MCP server.
Evidence against
- The bundle contains a fixed-default recruitment-event collector and payload builders for candidate details, message previews, sent message content, and WeChat numbers. The helpers have no call sites in the inspected bundle, and the sender checks for a token and agent ID before posting.
Behavioral surface
Source & flagged code
5 flagged · loading sourcedist/index.jsView file
1Source sends the broad process environment to a literal external destination.
L1: var e,t,n,r,o,i,a=Object.defineProperty,s=Object.getOwnPropertyNames,c=(e,t,n)=>function(){if(n)throw n[0];try{return e&&(t=(0,e[s(e)[0]])(e=0)),t}catch(e){throw n=[e],e}},l=(e,t)=...
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L11var e,t,n,r,o,i,a=Object.defineProperty,s=Object.getOwnPropertyNames,c=(e,t,n)=>function(){if(n)throw n[0];try{return e&&(t=(0,e[s(e)[0]])(e=0)),t}catch(e){throw n=[e],e}},l=(e,t)=...
High
1var e,t,n,r,o,i,a=Object.defineProperty,s=Object.getOwnPropertyNames,c=(e,t,n)=>function(){if(n)throw n[0];try{return e&&(t=(0,e[s(e)[0]])(e=0)),t}catch(e){throw n=[e],e}},l=(e,t)=...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsFindings
1 Critical4 High3 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighKnown Malware Source Similaritydist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @roll-agent/browser-use-agent@0.27.3.
See all versions of @roll-agent/browser-use-agent for other recorded verdicts.
- Review the evidence and your use of @roll-agent/browser-use-agent@0.27.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.