@serifpersia/dango@3.6.9
A web application for watching anime.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe active Google login and refresh paths disclose OAuth credentials to a package-selected default recipient unrelated to Google. This is concrete credential exfiltration during ordinary sign-in.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user starts Google sign-in or refreshes a saved Google session.
Impact
The worker receives credentials that can grant access to the user’s Google account.
Mechanism
The package posts the authorization code and saved refresh token to the default worker endpoint.
Attack narrative
During Google sign-in, the callback sends the authorization code to the package’s default worker, which returns and stores tokens. Later refreshes send the saved refresh token to that worker as well. The default is embedded in the package, so it is not a recipient selected by the user; the source shows no recipient-specific consent gate.
AI rationale
The active Google login and refresh paths disclose OAuth credentials to a package-selected default recipient unrelated to Google. This is concrete credential exfiltration during ordinary sign-in.
Evidence
server/dist/server.js
Network endpoints1
google-auth-client.ramiserifpersia.workers.dev
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- server/dist/server.js defaults Google OAuth to the package-controlled worker at google-auth-client.ramiserifpersia.workers.dev.
- The Google login flow sends the authorization code to that worker’s /exchange endpoint and saves the returned tokens.
- When refreshing Google access, the package sends the saved refresh token to the same worker’s /refresh endpoint.
- The Google login callback invokes the token exchange during ordinary sign-in.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
12 flagged · loading sourceserver/dist/server.jsView file
3causes have become circular...`;let n=$x(e);return n?(t.add(e),r+`
L4: caused by: `+PG(n,t)):r},Dwe=e=>PG(e,new Set),HG=(e,t,r)=>{if(!Em(e))return"";let n=r?"":e.message||"";if(t.has(e))return n+": ...";let i=$x(e);if(i){t.add(e);let s=typeof e.cause=...
L5: ${I}`,y=`,
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
server/dist/server.jsView on unpkg · L33causes have become circular...`;let n=$x(e);return n?(t.add(e),r+`
L4: caused by: `+PG(n,t)):r},Dwe=e=>PG(e,new Set),HG=(e,t,r)=>{if(!Em(e))return"";let n=r?"":e.message||"";if(t.has(e))return n+": ...";let i=$x(e);if(i){t.add(e);let s=typeof e.cause=...
L5: ${I}`,y=`,
...
L21: ${m}${w}
L22: ${I}`),f.pop(),`{${w}}`}case"number":return isFinite(h)?String(h):t?t(h):"null";case"boolean":return h===!0?"true":"false";case"undefined":return;case"bigint":if(n)return String(h)...
L23: `:`
...
L25: `);let n;for(;(n=ENe.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
L26: `),s=s.replace(/\\r/g,"\r")),t[i]=s}return t}function mNe(e){e=e||{};let t=tV(e);e.path=t;let r=Rn.configDotenv(e);if(!r.parsed){let o=new E
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
server/dist/server.jsView on unpkg · L3Findings
6 Critical5 High4 Medium6 Low
CriticalSame File Env Network Executionserver/dist/server.js
CriticalHardcoded Runtime Data Exfiltrationserver/dist/server.js
CriticalCredential Exfiltrationserver/dist/server.js
CriticalCommand Output Exfiltrationserver/dist/server.js
CriticalBrowser Credential Phishingserver/dist/server.js
CriticalRemote Asset Decode Executeserver/dist/server.js
HighChild Processserver/dist/server.js
HighShellorchestrator.js
HighEvalserver/dist/server.js
HighCross File Remote Execution Contextorchestrator.js
HighSemantic Analysis Limitedorchestrator.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @serifpersia/dango@3.6.9.
See all versions of @serifpersia/dango for other recorded verdicts.
- Avoid installing @serifpersia/dango@3.6.9. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.