registry / @tiledesk/tiledesk-server / 2.19.16

@tiledesk/tiledesk-server@2.19.16

The Tiledesk server module

AI Security Review

scanned 2h ago · by lpm-firewall-ai

The runtime AMQP worker accepts messages on the `functions` routing key and compiles an attacker-supplied function body. Any actor able to publish to the configured AMQP exchange can execute JavaScript in the server process.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Start the server/job worker, then publish a JSON message with `function` to the `tiledeskserver` AMQP exchange using routing key `functions`.

Impact

Remote code execution in the running server context if the AMQP broker is reachable by an untrusted publisher.

Mechanism

Unvalidated AMQP payload passed to `new Function`.

Rationale

The scanner's malicious label is not supported as malware by the inspected source, but the AMQP `new Function` handler is a concrete high-impact remote-code-execution capability. Flag as suspicious rather than block as malicious.

Evidence

package.jsonbin/wwwutils/jobs-worker-queue-manager/queueManagerClassV2.jsutils/jobs-worker-queue-manager/JobManagerV2.jsservices/trainingService.js.npmrc

Network endpoints1

amqp://localhost

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

`utils/jobs-worker-queue-manager/queueManagerClassV2.js` binds AMQP routing key `functions`.
AMQP message field `fdata.function` is executed with `new Function` without validation.
The consumer starts through `JobManagerV2.connectAndStartWorker`, creating a runtime RCE capability for AMQP publishers.
`package.json` has guarded preinstall that writes package-local `.npmrc` when enterprise mode is explicitly enabled.

Evidence against

No source evidence of credential harvesting, filesystem discovery, exfiltration, or AI-agent control-surface mutation.
`bin/www` is a conventional HTTP server entrypoint; it does not execute shell commands or remote payloads.
The preinstall hook is conditional on `ENABLE_ENTERPRISE_MODULE` and only configures npm registry authentication.
Observed HTTP integrations are service functionality, including configured chatbot training and webhook endpoints.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 386 file(s), 2.43 MB of source, external domains: 34.65.210.38, api.elevenlabs.io, api.telegram.org, api.tiledesk.com, changeit.cloudfunctions.net, chat-v2-dev.firebaseio.com, console.tiledesk.com, developer.tiledesk.com, docs.tiledesk.com, graph.facebook.com, image.jpg, panel.tiledesk.com, securetoken.google.com, tiledesk.com, www.emanueleferonato.com, www.google.com, www.tiledesk.com, www.youtube.com

Source & flagged code

39 flagged

package.jsonView file

Lines 1-32json

2 "name": "@tiledesk/tiledesk-server",

3 "description": "The Tiledesk server module",

4 "version": "2.19.16",

5 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L5

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg · L5

6 "start": "node ./bin/www",

7 "pretest": "mongodb-runner start",

8 "watchenv": "nodemon --watch .env --watch ./confenv/.env ./bin/www",

9 "test": "mocha ./test/*.js ./pubmodules/**/test/*.js ./modules/**/test/*.js ./channels/*/test/*.js ./node_modules/@tiledesk-ent/**/test/*.js --exit",

10 "test:int": "mocha ./test-int/*.js ./pubmodules/**/test-int/*.js ./modules/**/test-int/*.js ./channels/**/test-int/*.js --exit",

11 "posttest": "mongodb-runner stop",

12 "preinstall": "if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L12

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L12

13 "heroku-prebuild": "if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi",

14 "enable-ent": "echo //registry.npmjs.org/:_authToken=${NPM_TOKEN} > .npmrc"

15 },

16 "private": false,

17 "author": "Andrea Leo - Tiledesk SRL",

18 "license": "AGPL-3.0",

19 "homepage": "https://www.tiledesk.com",

20 "repository": {

21 "type": "git",

22 "url": "git+https://github.com/Tiledesk/tiledesk-server.git"

23 },

24 "engines": {

25 "node": "16.17.0",

26 "npm": "8.15.0"

27 },

28 "bin": {

29 "tiledesk-server": "./bin/www"

30 },

31 "optionalDependencies": {

32 "@tiledesk-ent/tiledesk-server-enterprise": "^1.0.0",

docs/api-dev.mdView file

Lines 29-69markdown

31{

32 "_id": "123456",

33 "firstname": "andrea custom",

34 "lastname": "leo custom",

35 "email": "email2@email.com",

36 "custom1": "val1",

37 "attributes": {"c1":"v1"},

38 "sub": "userexternal",

39 "aud": "https://tiledesk.com/projects/5e28108c361fbb001729e960"

40}

utils/jobs-worker-queue-manager/queueManagerClassV2.jsView file

Lines 250-290javascript

250 // if (this.debug) {console.log("Got msg1:"+ message_string + " topic:" + topic);}

251 // console.log("Got msg1:"+ message_string + " topic:" + topic);

252

253 if (topic === 'functions') {

254 // if (this.debug) {console.log("Got msg2:"+ JSON.stringify(message_string) + " topic:" + topic);}

255 // console.log("Got msg2:"+ JSON.stringify(message_string) + " topic:" + topic);

256

257

middleware/noentitycheck.jsView file

Lines 1-11javascript

1var winston = require('../config/winston');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

middleware/noentitycheck.jsView on unpkg · L1

5module.exports =

6 function(req,res,next

archive.shView file

•path = archive.sh kind = build_helper sizeBytes = 2865 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

archive.shView on unpkg

channels/chat21/chat21WebHook.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tiledesk/tiledesk-server@2.19.13 matchedIdentity = npm:[redacted]:2.19.13 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

channels/chat21/chat21WebHook.jsView on unpkg

pubmodules/cache/mongoose-cachegoose-fn.jsView file

Lines 923-963javascript

923 // fai cache faq

924

925 }

926

927module.exports = function (mongoose, option) {

928

929 if (process.env.CACHE_ENABLED == true || process.env.

pubmodules/sms/listener.jsView file

26patternName = generic_password severity = medium line = 26 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/sms/listener.js

pubmodules/sms/listener.jsView on unpkg · L26

pubmodules/voice-twilio/listener.jsView file

23patternName = generic_password severity = medium line = 23 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/voice-twilio/listener.js

pubmodules/voice-twilio/listener.jsView on unpkg · L23

pubmodules/voice/listener.jsView file

32patternName = generic_password severity = medium line = 32 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/voice/listener.js

pubmodules/voice/listener.jsView on unpkg · L32

pubmodules/tilebot/listener.jsView file

42patternName = generic_password severity = medium line = 42 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/tilebot/listener.js

pubmodules/tilebot/listener.jsView on unpkg · L42

pubmodules/whatsapp/listener.jsView file

26patternName = generic_password severity = medium line = 26 matchedText = winston....rd);

Medium

Secret Pattern

Hardcoded password in pubmodules/whatsapp/listener.js

pubmodules/whatsapp/listener.jsView on unpkg · L26

test/kbRoute.jsView file

196patternName = generic_password severity = medium line = 196 matchedText = .send({ ..." })

Medium

Secret Pattern

Hardcoded password in test/kbRoute.js

test/kbRoute.jsView on unpkg · L196

test/projectRoute.jsView file

64patternName = generic_password severity = medium line = 64 matchedText = .send({ ..." })

Medium

Secret Pattern

Hardcoded password in test/projectRoute.js

test/projectRoute.jsView on unpkg · L64

109patternName = generic_password severity = medium line = 109 matchedText = .send({ ..." })

Medium

Secret Pattern

Hardcoded password in test/projectRoute.js

test/projectRoute.jsView on unpkg · L109

test/authorization.jsView file

32patternName = generic_password severity = medium line = 32 matchedText = var pwd ...4!";

Medium

Secret Pattern

Hardcoded password in test/authorization.js

test/authorization.jsView on unpkg · L32

test/authentication.jsView file

159patternName = generic_password severity = medium line = 159 matchedText = var pwd ...4!";

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L159

208patternName = generic_password severity = medium line = 208 matchedText = // ..." })

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L208

235patternName = generic_password severity = medium line = 235 matchedText = var pwd ...4!";

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L235

259patternName = generic_password severity = medium line = 259 matchedText = var pwd ...4!";

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L259

docs/deploy.mdView file

60patternName = private_key_rsa severity = critical line = 60 matchedText = FIREBASE...MXYX

Critical

Secret Pattern

RSA private key in docs/deploy.md

docs/deploy.mdView on unpkg · L60

services/emailService.jsView file

266patternName = private_key_rsa severity = critical line = 266 matchedText = // pri.....",

Critical

Secret Pattern

RSA private key in services/emailService.js

services/emailService.jsView on unpkg · L266

Source & flagged code

39 flagged · loading source

package.jsonView file

•dependencies registry_only=@tiledesk-ent/tiledesk-server-enterprise,@tiledesk-ent/tiledesk-server-jwthistory,@tiledesk-ent/tiledesk-server-payments,@tiledesk-ent/tiledesk-server-request-history,@tiledesk-ent/tiledesk-server-visitorcounter

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.preinstall = if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•Runtime dependency names matching Node built-ins: http

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

•scripts.preinstall = if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

docs/api-dev.mdView file

49patternName = supabase_service_key severity = critical line = 49 matchedText = eyJhbGci...9UGU

Critical

Critical Secret

Package contains a critical-looking secret pattern.

docs/api-dev.mdView on unpkg · L49

49patternName = supabase_service_key severity = critical line = 49 matchedText = eyJhbGci...9UGU

Critical

Secret Pattern