registry / @testsmith/api-spector-agent / 0.9.7
@testsmith/api-spector-agent@0.9.7
API Spector private runner: monitor internal/local APIs the cloud cannot reach, with no inbound connections.
AI Security Review
scanned 11h ago · by lpm-firewall-aiThe flagged entry point is a private monitoring runner: it requires a user-configured APP_URL and token, polls that service, executes its configured monitors, and reports results there. The reviewed credential-provider and VM code is consistent with retrieving configured secrets and running monitor scripts; the scanner’s claimed fixed gateway and obfuscated loader were not substantiated in the inspected source.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Running the CLI entry point; it exits unless APP_URL and an agent or runtime token are configured.
Impact
Configured monitor traffic and results are sent to the user-selected service; no unrelated collection or fixed credential redirect was identified.
Mechanism
The agent polls APP_URL for due monitors, runs their configured requests and scripts, and posts results back to APP_URL. Secret-provider code retrieves requested secrets from their configured providers.
AI rationale
The flagged entry point is a private monitoring runner: it requires a user-configured APP_URL and token, polls that service, executes its configured monitors, and reports results there. The reviewed credential-provider and VM code is consistent with retrieving configured secrets and running monitor scripts; the scanner’s claimed fixed gateway and obfuscated loader were not substantiated in the inspected source.
Network endpoints3
${APP_URL}/api/monitor-runtime/due${APP_URL}/api/monitor-runtime/${id}/resultsecretsmanager.${region}.amazonaws.com/
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies dist/index.cjs as both the CLI entry point and package main.
- The runner requires APP_URL and an agent or runtime token, then polls that configured service.
- The runner sends monitor results to the same configured APP_URL.
- AWS secret retrieval targets the region-specific AWS Secrets Manager host.
- Inline secret injection uses API_SPECTOR_SECRETS and API_SPECTOR_SECRET_ENV_MAP.
Evidence against
- No install lifecycle scripts are declared in the manifest.
- The runner’s network destination is supplied by the user through APP_URL; no fixed unofficial gateway was identified.
- The AWS credential flow signs requests to secretsmanager.<region>.amazonaws.com for Secrets Manager.
- The inspected VM execution is part of running configured request scripts in the monitoring runner.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsPossibleObfuscation
Source & flagged code
10 flaggeddist/index.cjsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.cjs:
"Authorization",
"Proxy-Authorization",
get baseUrl() {
return this.baseUrl?.origin;
this[kProxyHeaders]["proxy-authorization"] = `Basic ${opts.auth}`;
this[kProxyHeaders]["proxy-authorization"] = opts.token;
this[kProxyHeaders]["proxy-authorization"] = `Basic ${Buffer.from(`${decodeURIComponent(username)}:${decodeURIComponent(password)}`).toString("base64")}`;
const existProxyAuth = headers && Object.keys(headers).find((key) => key.toLowerCase() === "proxy-authorization");
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.cjsView on unpkg247}, m7.utcOffset = function() {
L248: return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
L249: }, m7.diff = function(r64, d9, l9) {
...
L356: * @see DOMParser.SupportedType.isHTML
L357: * @see https://www.iana.org/assignments/media-types/text/html IANA MimeType registration
L358: * @see https://en.wikipedia.org/wiki/HTML Wikipedia
...
L586: /**
L587: * @private
L588: * @param {function (Node):boolean} predicate
...
L993: function _xmlEncoder(c8) {
L994: return c8 == "<" && "<" || c8 == ">" && ">" || c8 == "&" && "&" || c8 == '"' && """ || "&#" + c8.charCodeAt() + ";";
L995: }
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
Findings
6 High6 Medium4 Low
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limiteddist/index.cjs
HighKnown Malware Source Similaritydist/index.cjs
HighKnown Malware Source Fingerprint Signaturedist/index.cjs
MediumUnsafe Vm Contextdist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowWeak Cryptodist/index.cjs
Affected versions and remediation
This report applies to @testsmith/api-spector-agent@0.9.7.
See all versions of @testsmith/api-spector-agent for other recorded verdicts.
- Review the evidence and your use of @testsmith/api-spector-agent@0.9.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.