registry / @tiledesk/tiledesk-server / 2.19.13

@tiledesk/tiledesk-server@2.19.13

The Tiledesk server module

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Normal server startup loads an obfuscated Stripe module that writes Stripe credentials to configured application logs. The preinstall hook only conditionally creates a local npm credential file for enterprise dependencies; no AI-agent control surface is modified.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Import/start `app.js`; separately npm preinstall with `ENABLE_ENTERPRISE_MODULE` set

Impact

Stripe credentials may be exposed to console, log files, or optionally configured MongoDB log storage.

Mechanism

Logs sensitive environment credentials; conditionally writes local npm credentials

Rationale

The package is not confirmed malicious, but it contains an automatically triggered credential-logging flaw and opaque payment code that warrant a warning. No concrete malicious payload or unconsented AI-agent control-surface mutation was found.

Evidence

package.jsonpubmodules/s/stripe/index.jsservices/modulesManager.jsconfig/winston.jsutils/jobs-worker-queue-manager/queueManagerClassV2.jslogs/app.log.npmrc

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

`pubmodules/s/stripe/index.js` is obfuscated and reads Stripe secret environment variables.
That module logs `apiKey`, `endpointSecret`, and `apiSecretKey` at import and webhook handling.
`services/modulesManager.js` loads the Stripe module during normal server startup.
`config/winston.js` writes info logs to console and `logs/app.log`.
`package.json` preinstall conditionally writes `.npmrc` from `NPM_TOKEN`.

Evidence against

No install hook downloads or executes a remote payload.
No child-process, shell, native loader, or package-controlled exfiltration endpoint was found.
The `.npmrc` write is guarded by `ENABLE_ENTERPRISE_MODULE` and targets npm registry configuration.
`queueManagerClassV2.js` contains `new Function`, but its worker calls nonexistent `processMsg3`, not `processMsg2`.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 382 file(s), 2.37 MB of source, external domains: 34.65.210.38, api.elevenlabs.io, api.telegram.org, api.tiledesk.com, changeit.cloudfunctions.net, chat-v2-dev.firebaseio.com, console.tiledesk.com, developer.tiledesk.com, docs.tiledesk.com, graph.facebook.com, image.jpg, panel.tiledesk.com, securetoken.google.com, tiledesk.com, www.emanueleferonato.com, www.google.com, www.tiledesk.com, www.youtube.com

Source & flagged code

39 flagged

package.jsonView file

Lines 1-32json

2 "name": "@tiledesk/tiledesk-server",

3 "description": "The Tiledesk server module",

4 "version": "2.19.13",

5 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L5

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg · L5

6 "start": "node ./bin/www",

7 "pretest": "mongodb-runner start",

8 "watchenv": "nodemon --watch .env --watch ./confenv/.env ./bin/www",

9 "test": "mocha ./test/*.js ./pubmodules/**/test/*.js ./modules/**/test/*.js ./channels/*/test/*.js ./node_modules/@tiledesk-ent/**/test/*.js --exit",

10 "test:int": "mocha ./test-int/*.js ./pubmodules/**/test-int/*.js ./modules/**/test-int/*.js ./channels/**/test-int/*.js --exit",

11 "posttest": "mongodb-runner stop",

12 "preinstall": "if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L12

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L12

13 "heroku-prebuild": "if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi",

14 "enable-ent": "echo //registry.npmjs.org/:_authToken=${NPM_TOKEN} > .npmrc"

15 },

16 "private": false,

17 "author": "Andrea Leo - Tiledesk SRL",

18 "license": "AGPL-3.0",

19 "homepage": "https://www.tiledesk.com",

20 "repository": {

21 "type": "git",

22 "url": "git+https://github.com/Tiledesk/tiledesk-server.git"

23 },

24 "engines": {

25 "node": "16.17.0",

26 "npm": "8.15.0"

27 },

28 "bin": {

29 "tiledesk-server": "./bin/www"

30 },

31 "optionalDependencies": {

32 "@tiledesk-ent/tiledesk-server-enterprise": "^1.0.0",

docs/api-dev.mdView file

Lines 29-69markdown

31{

32 "_id": "123456",

33 "firstname": "andrea custom",

34 "lastname": "leo custom",

35 "email": "email2@email.com",

36 "custom1": "val1",

37 "attributes": {"c1":"v1"},

38 "sub": "userexternal",

39 "aud": "https://tiledesk.com/projects/5e28108c361fbb001729e960"

40}

utils/jobs-worker-queue-manager/queueManagerClassV2.jsView file

Lines 250-290javascript

250 // if (this.debug) {console.log("Got msg1:"+ message_string + " topic:" + topic);}

251 // console.log("Got msg1:"+ message_string + " topic:" + topic);

252

253 if (topic === 'functions') {

254 // if (this.debug) {console.log("Got msg2:"+ JSON.stringify(message_string) + " topic:" + topic);}

255 // console.log("Got msg2:"+ JSON.stringify(message_string) + " topic:" + topic);

256

257

middleware/noentitycheck.jsView file

Lines 1-11javascript

1var winston = require('../config/winston');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

middleware/noentitycheck.jsView on unpkg · L1

5module.exports =

6 function(req,res,next

archive.shView file

•path = archive.sh kind = build_helper sizeBytes = 2865 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

archive.shView on unpkg

app.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tiledesk/tiledesk-server@2.19.12 matchedIdentity = npm:[redacted]:2.19.12 similarity = 0.975 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app.jsView on unpkg

pubmodules/cache/mongoose-cachegoose-fn.jsView file

Lines 923-963javascript

923 // fai cache faq

924

925 }

926

927module.exports = function (mongoose, option) {

928

929 if (process.env.CACHE_ENABLED == true || process.env.

pubmodules/sms/listener.jsView file

26patternName = generic_password severity = medium line = 26 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/sms/listener.js

pubmodules/sms/listener.jsView on unpkg · L26

pubmodules/voice-twilio/listener.jsView file

23patternName = generic_password severity = medium line = 23 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/voice-twilio/listener.js

pubmodules/voice-twilio/listener.jsView on unpkg · L23

pubmodules/voice/listener.jsView file

32patternName = generic_password severity = medium line = 32 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/voice/listener.js

pubmodules/voice/listener.jsView on unpkg · L32

pubmodules/tilebot/listener.jsView file

42patternName = generic_password severity = medium line = 42 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/tilebot/listener.js

pubmodules/tilebot/listener.jsView on unpkg · L42

pubmodules/whatsapp/listener.jsView file

26patternName = generic_password severity = medium line = 26 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/whatsapp/listener.js

pubmodules/whatsapp/listener.jsView on unpkg · L26

test/kbRoute.jsView file

195patternName = generic_password severity = medium line = 195 matchedText = .send({ ..." })

Medium

Secret Pattern

Hardcoded password in test/kbRoute.js

test/kbRoute.jsView on unpkg · L195

test/projectRoute.jsView file

64patternName = generic_password severity = medium line = 64 matchedText = .send({ ..." })

Medium

Secret Pattern

Hardcoded password in test/projectRoute.js

test/projectRoute.jsView on unpkg · L64

109patternName = generic_password severity = medium line = 109 matchedText = .send({ ..." })

Medium

Secret Pattern

Hardcoded password in test/projectRoute.js

test/projectRoute.jsView on unpkg · L109

test/authorization.jsView file

32patternName = generic_password severity = medium line = 32 matchedText = var pwd ...4!";

Medium

Secret Pattern

Hardcoded password in test/authorization.js

test/authorization.jsView on unpkg · L32

test/authentication.jsView file

159patternName = generic_password severity = medium line = 159 matchedText = var pwd ...4!";

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L159

208patternName = generic_password severity = medium line = 208 matchedText = // ..." })

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L208

235patternName = generic_password severity = medium line = 235 matchedText = var pwd ...4!";

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L235

259patternName = generic_password severity = medium line = 259 matchedText = var pwd ...4!";

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L259

docs/deploy.mdView file

60patternName = private_key_rsa severity = critical line = 60 matchedText = FIREBASE...MXYX

Critical

Secret Pattern

RSA private key in docs/deploy.md

docs/deploy.mdView on unpkg · L60

services/emailService.jsView file

266patternName = private_key_rsa severity = critical line = 266 matchedText = // pri.....",

Critical

Secret Pattern

RSA private key in services/emailService.js

services/emailService.jsView on unpkg · L266

Source & flagged code

39 flagged · loading source

package.jsonView file

•dependencies registry_only=@tiledesk-ent/tiledesk-server-enterprise,@tiledesk-ent/tiledesk-server-jwthistory,@tiledesk-ent/tiledesk-server-payments,@tiledesk-ent/tiledesk-server-request-history,@tiledesk-ent/tiledesk-server-visitorcounter

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.preinstall = if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•Runtime dependency names matching Node built-ins: http

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

•scripts.preinstall = if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

docs/api-dev.mdView file

49patternName = supabase_service_key severity = critical line = 49 matchedText = eyJhbGci...9UGU

Critical

Critical Secret

Package contains a critical-looking secret pattern.

docs/api-dev.mdView on unpkg · L49

49patternName = supabase_service_key severity = critical line = 49 matchedText = eyJhbGci...9UGU

Critical

Secret Pattern