@taole/dd-playwright@0.1.6
Standalone stdio MCP & CLI: Playwright browser automation + isolated whistle proxy + diandian account storageState injection
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe optional web-console command exposes saved service credentials to clients that can reach its port: the server binds all interfaces and returns cookie-bearing account objects without authentication. This is a concrete credential disclosure, so publication should be blocked.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the startweb command, which starts the web console.
Impact
A reachable network client can obtain saved service credentials and use the account session.
Mechanism
The console listens on all interfaces and returns account records, including session cookies and active browser storage state, from its account-list endpoint.
Attack narrative
Running the startweb command launches the console. It binds unauthenticated HTTP to all interfaces, and the account-list endpoint returns records containing saved session cookies and active browser storage state. Any client able to reach the port can copy those credentials and use the account session.
AI rationale
The optional web-console command exposes saved service credentials to clients that can reach its port: the server binds all interfaces and returns cookie-bearing account objects without authentication. This is a concrete credential disclosure, so publication should be blocked.
Evidence
bin/cli.mjssrc/server/daemon.mjssrc/server/web-server.mjssrc/account-store.mjssrc/auth/diandian-auth.mjs
Network endpoints2
0.0.0.0:12309/api/accounts
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The startweb command launches the package’s web console through its daemon.
- The console listens on all network interfaces.
- An unauthenticated account-list endpoint returns saved account records as JSON.
- Those records include session cookies, and the active account also includes browser storage state.
- The login flow collects service cookies and saves the account data locally.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedsrc/server/daemon.mjsView file
1import { spawn } from "node:child_process";
L2: import { existsSync, readFileSync, writeFileSync, unlinkSync, openSync } from "node:fs";
High
Child Process
Package source references child process execution.
src/server/daemon.mjsView on unpkg · L1src/browser-check.mjsView file
81// 调用 playwright 内置命令安装 chromium
L82: execSync("npx playwright install chromium", {
L83: stdio: silent ? "ignore" : "inherit",
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
src/browser-check.mjsView on unpkg · L81bin/cli.mjsView file
38if (command === "startweb") {
let port = 12309;
const portIdx = args.indexOf("--port");
if (portIdx !== -1 && args[portIdx + 1]) {
port = parseInt(args[portIdx + 1], 10)
Findings
5 High3 Medium4 Low
HighChild Processsrc/server/daemon.mjs
HighShell
HighRuntime Package Installsrc/browser-check.mjs
HighAi Review Evidencebin/cli.mjs
HighAi Review Evidencebin/cli.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @taole/dd-playwright@0.1.6.
See all versions of @taole/dd-playwright for other recorded verdicts.
- Avoid installing @taole/dd-playwright@0.1.6. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.