registry / @taole/dd-playwright / 0.1.10
@taole/dd-playwright@0.1.10
Standalone stdio MCP & CLI: Playwright browser automation + isolated whistle proxy + diandian account storageState injection
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe flagged updater and process operations are part of explicit update and local daemon commands. Account cookies are verified against the intended service, and browser navigation is user-requested; the inspected source does not establish a concrete attack surface.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The updater runs when a user invokes the update or upgrade CLI command; browser actions run when requested through the CLI or MCP tools.
Impact
No confirmed unauthorized credential transfer, stealth persistence, or destructive behavior was established.
Mechanism
The updater checks package registries and installs this package. The daemon manages the package's local service, while browser contexts use stored account state for requested navigation.
AI rationale
The flagged updater and process operations are part of explicit update and local daemon commands. Account cookies are verified against the intended service, and browser navigation is user-requested; the inspected source does not establish a concrete attack surface.
Evidence
package.jsonsrc/updater.mjssrc/server/daemon.mjssrc/auth/diandian-auth.mjssrc/browser-manager.mjs
Network endpoints4
registry.npmjs.org/registry.npmmirror.com/yapi.tuwan.com/activityapi/getUserInfo?format=json127.0.0.1
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines CLI entrypoints and ordinary runtime dependencies; it contains no lifecycle hook.
- The updater is invoked by the explicit update or upgrade command and installs this package itself.
- The daemon starts the package's own CLI as a detached process and checks its local service over loopback.
- The account flow sends cookies to the fixed Diandian user-info endpoint; browser navigation is an explicit tool action using browser-managed storage state.
- The inspected proxy and browser dependencies support local proxy and browser automation behavior; the flagged dependency operations concern proxy headers, rules, and certificate helpers.
Evidence against
- The scanner's source-similarity and process-execution hints do not establish malicious behavior: process execution is tied to explicit updating or daemon management, and no unrelated credential recipient or hidden collector was identified.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
4 flaggedsrc/updater.mjsView file
2import { fileURLToPath } from "node:url";
L3: import { execSync } from "node:child_process";
L4: import { resolveConfig } from "./config.mjs";
High
115try {
L116: execSync(`npm install -g ${PACKAGE_NAME}@latest`, {
L117: stdio: "inherit",
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
src/updater.mjsView on unpkg · L115src/server/daemon.mjsView file
•matchType = normalized_sha256
matchedPackage = @taole/dd-playwright@0.1.6
matchedPath = src/server/daemon.mjs
matchedIdentity = npm:QHRhb2xlL2RkLXBsYXl3cmlnaHQ:0.1.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Findings
4 High3 Medium5 Low
HighChild Processsrc/updater.mjs
HighShell
HighRuntime Package Installsrc/updater.mjs
HighKnown Malware Source Similaritysrc/server/daemon.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taole/dd-playwright@0.1.10.
See all versions of @taole/dd-playwright for other recorded verdicts.
- Review the evidence and your use of @taole/dd-playwright@0.1.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.