registry / @taole/dd-playwright / 0.1.7
@taole/dd-playwright@0.1.7
Standalone stdio MCP & CLI: Playwright browser automation + isolated whistle proxy + diandian account storageState injection
AI Security Review
scanned 13d ago · by lpm-firewall-aiSource inspection found no install hook or concrete attack behavior. The flagged process and network operations support explicit package features, including local service startup, browser setup, and loopback proxying.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command or invokes an MCP browser tool; Chromium installation occurs on browser or login use if Chromium is absent.
Impact
The inspected behavior supports the package's stated browser and account-management functions; no unrelated credential transfer or unconsented installation mutation was found.
Mechanism
The daemon launches the package's own web server, the proxy binds to loopback, and browser login navigates to the intended Diandian service.
AI rationale
Source inspection found no install hook or concrete attack behavior. The flagged process and network operations support explicit package features, including local service startup, browser setup, and loopback proxying.
Network endpoints2
127.0.0.1y.tuwan.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares browser, proxy, and MCP libraries and has no install lifecycle script.
- The flagged process launch starts this package's local web service for an explicit start command; the Chromium installer is called when browser/login functionality is invoked and Chromium is missing.
- The proxy is started on the loopback interface with an isolated data directory, and rules are restricted by a required domain pattern.
- The authentication flow navigates to the intended Diandian service; inspected source showed no transfer of saved credentials to an unrelated recipient.
- The inspected dependency entrypoints support browser automation, MCP stdio transport, and proxy operation; the scanner's runtime-operation matches are ordinary proxy and certificate helpers.
Evidence against
- The package can run a package-manager command at runtime to install Chromium when its browser feature needs it.
- The daemon can run detached and inherits the process environment, but the inspected source starts the package's own local web service.
Behavioral surface
Source & flagged code
4 flaggedsrc/server/daemon.mjsView file
1import { spawn } from "node:child_process";
L2: import { existsSync, readFileSync, writeFileSync, unlinkSync, openSync } from "node:fs";
High
Child Process
Package source references child process execution.
src/server/daemon.mjsView on unpkg · L1•matchType = normalized_sha256
matchedPackage = @taole/dd-playwright@0.1.6
matchedPath = src/server/daemon.mjs
matchedIdentity = npm:QHRhb2xlL2RkLXBsYXl3cmlnaHQ:0.1.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/server/daemon.mjsView on unpkgsrc/browser-check.mjsView file
81// 调用 playwright 内置命令安装 chromium
L82: execSync("npx playwright install chromium", {
L83: stdio: silent ? "ignore" : "inherit",
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltasrc/whistle-proxy.mjs
HighChild Processsrc/server/daemon.mjs
HighShell
HighRuntime Package Installsrc/browser-check.mjs
HighKnown Malware Source Similaritysrc/server/daemon.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @taole/dd-playwright@0.1.7.
See all versions of @taole/dd-playwright for other recorded verdicts.
- Review the evidence and your use of @taole/dd-playwright@0.1.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.