registry / @tiledesk/tiledesk-server / 2.20.1

@tiledesk/tiledesk-server@2.20.1

⚠ Under review

The Tiledesk server module

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The inspected lifecycle behavior is gated enterprise dependency setup, and the readable deployment and server files show no concrete attack. The required Helm archive was inaccessible as a binary file, so its contents remain unresolved and warrant manual review.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Unknown; the archive contents were unavailable for inspection.

Impact

No impact was established; the unreadable archive prevents a complete assessment.

Mechanism

No mechanism was established from the readable source files.

AI rationale

Evidence

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzpackage.json.tmp-github-search/widget/deploy_amazon_beta.shapp.jsbin/www

Decision evidence

public snapshot

AI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest gates its preinstall action on ENABLE_ENTERPRISE_MODULE and writes NPM_TOKEN to a local .npmrc for enterprise dependency access.
The required Helm archive could not be inspected: the source reader rejected it as a binary or unapproved NUL file, and no printable citation excerpt was available.
The deployment script builds and syncs the Tiledesk widget to its named S3 bucket; app.js loads dotenv and ordinary server modules.

Evidence against

The inspected lifecycle script is conditional and relates to this package’s enterprise dependencies; no malicious behavior was established from it.
The deployment script’s S3 sync commands are part of the widget deployment workflow.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 387 file(s), 2.43 MB of source, external domains: 34.65.210.38, api.elevenlabs.io, api.telegram.org, api.tiledesk.com, changeit.cloudfunctions.net, chat-v2-dev.firebaseio.com, console.tiledesk.com, developer.tiledesk.com, docs.tiledesk.com, graph.facebook.com, image.jpg, panel.tiledesk.com, securetoken.google.com, tiledesk.com, www.emanueleferonato.com, www.google.com, www.tiledesk.com, www.youtube.com

Source & flagged code

29 flagged

package.jsonView file

Lines 1-32json

2 "name": "@tiledesk/tiledesk-server",

3 "description": "The Tiledesk server module",

4 "version": "2.20.1",

5 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L5

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg · L5

6 "start": "node ./bin/www",

7 "pretest": "mongodb-runner start",

8 "watchenv": "nodemon --watch .env --watch ./confenv/.env ./bin/www",

9 "test": "mocha ./test/*.js ./pubmodules/**/test/*.js ./modules/**/test/*.js ./channels/*/test/*.js ./node_modules/@tiledesk-ent/**/test/*.js --exit",

10 "test:int": "mocha ./test-int/*.js ./pubmodules/**/test-int/*.js ./modules/**/test-int/*.js ./channels/**/test-int/*.js --exit",

11 "posttest": "mongodb-runner stop",

12 "preinstall": "if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L12

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L12

13 "heroku-prebuild": "if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi",

14 "enable-ent": "echo //registry.npmjs.org/:_authToken=${NPM_TOKEN} > .npmrc"

15 },

16 "private": false,

17 "author": "Andrea Leo - Tiledesk SRL",

18 "license": "AGPL-3.0",

19 "homepage": "https://www.tiledesk.com",

20 "repository": {

21 "type": "git",

22 "url": "git+https://github.com/Tiledesk/tiledesk-server.git"

23 },

24 "engines": {

25 "node": "16.17.0",

26 "npm": "8.15.0"

27 },

28 "bin": {

29 "tiledesk-server": "./bin/www"

30 },

31 "optionalDependencies": {

32 "@tiledesk-ent/tiledesk-server-enterprise": "^1.0.0",

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

pubmodules/cache/mongoose-cachegoose-fn.jsView file

Lines 923-963javascript

923 // fai cache faq

924

925 }

926

927module.exports = function (mongoose, option) {

928

929 if (process.env.

utils/jobs-worker-queue-manager/queueManagerClassV2.jsView file

Lines 250-290javascript

250 // if (this.debug) {console.log("Got msg1:"+ message_string + " topic:" + topic);}

251 // console.log("Got msg1:"+ message_string + " topic:" + topic);

252

253 if (topic === 'functions') {

254 // if (this.debug) {console.log("Got msg2:"+ JSON.stringify(message_string) + " topic:" + topic);}

255 // console.log("Got msg2:"+ JSON.stringify(message_string) + " topic:" + topic);

middleware/noentitycheck.jsView file

Lines 1-11javascript

1var winston = require('../config/winston');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

middleware/noentitycheck.jsView on unpkg · L1

5module.exports =

.tmp-github-search/chat21-web-widget/src/assets/onnx/ort-wasm-simd-threaded.wasmView file

•path = .tmp-github-search/chat21-web-widget/src/assets/onnx/ort-wasm-simd-threaded.wasm kind = wasm_module sizeBytes = 12361745 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

.tmp-github-search/chat21-web-widget/src/assets/onnx/ort-wasm-simd-threaded.wasmView on unpkg

archive.shView file

•path = archive.sh kind = build_helper sizeBytes = 2865 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

archive.shView on unpkg

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzView file

•path = .tmp-github-[redacted]-1.1.22.tgz kind = high_entropy_blob sizeBytes = 241786 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzView on unpkg

•path = .tmp-github-[redacted]-1.1.22.tgz kind = compressed_blob sizeBytes = 241786 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzView on unpkg

•path = .tmp-github-[redacted]-1.1.22.tgz kind = nested_archive_needs_inspection sizeBytes = 241786 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzView on unpkg

.tmp-github-search/widget/deploy_amazon_beta.shView file

•path = .tmp-github-search/widget/deploy_amazon_beta.sh kind = payload_in_excluded_dir sizeBytes = 1988 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.tmp-github-search/widget/deploy_amazon_beta.shView on unpkg

app.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tiledesk/tiledesk-server@2.24.2 matchedIdentity = npm:[redacted]:2.24.2 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app.jsView on unpkg

pubmodules/sms/listener.jsView file

26patternName = generic_password severity = medium line = 26

Medium

Secret Pattern

Hardcoded password in pubmodules/sms/listener.js

pubmodules/sms/listener.jsView on unpkg · L26

pubmodules/voice-twilio/listener.jsView file

23patternName = generic_password severity = medium line = 23

Medium

Secret Pattern

Hardcoded password in pubmodules/voice-twilio/listener.js

pubmodules/voice-twilio/listener.jsView on unpkg · L23

pubmodules/voice/listener.jsView file

32patternName = generic_password severity = medium line = 32

Medium

Secret Pattern

Hardcoded password in pubmodules/voice/listener.js

pubmodules/voice/listener.jsView on unpkg · L32

pubmodules/tilebot/listener.jsView file

42patternName = generic_password severity = medium line = 42

Medium

Secret Pattern

Hardcoded password in pubmodules/tilebot/listener.js

pubmodules/tilebot/listener.jsView on unpkg · L42

pubmodules/whatsapp/listener.jsView file

26patternName = generic_password severity = medium line = 26

Medium

Secret Pattern

Hardcoded password in pubmodules/whatsapp/listener.js

pubmodules/whatsapp/listener.jsView on unpkg · L26

test/kbRoute.jsView file

196patternName = generic_password severity = medium line = 196

Medium

Secret Pattern

Hardcoded password in test/kbRoute.js

test/kbRoute.jsView on unpkg · L196

test/projectRoute.jsView file

64patternName = generic_password severity = medium line = 64

Medium

Secret Pattern

Hardcoded password in test/projectRoute.js

test/projectRoute.jsView on unpkg · L64

109patternName = generic_password severity = medium line = 109

Medium

Secret Pattern

Hardcoded password in test/projectRoute.js

test/projectRoute.jsView on unpkg · L109

test/authorization.jsView file

32patternName = generic_password severity = medium line = 32

Medium

Secret Pattern

Hardcoded password in test/authorization.js

test/authorization.jsView on unpkg · L32

test/authentication.jsView file

159patternName = generic_password severity = medium line = 159

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L159

235patternName = generic_password severity = medium line = 235

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L235

259patternName = generic_password severity = medium line = 259

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L259

.tmp-github-search/tiledesk-chatbot/tybotRoute/TdCache.jsView file

13patternName = generic_password severity = medium line = 13

Medium

Secret Pattern

Hardcoded password in .tmp-github-search/tiledesk-chatbot/tybotRoute/TdCache.js

.tmp-github-search/tiledesk-chatbot/tybotRoute/TdCache.jsView on unpkg · L13

Source & flagged code

29 flagged · loading source

package.jsonView file

•dependencies registry_only=@tiledesk-ent/tiledesk-server-enterprise,@tiledesk-ent/tiledesk-server-jwthistory,@tiledesk-ent/tiledesk-server-payments,@tiledesk-ent/tiledesk-server-request-history,@tiledesk-ent/tiledesk-server-visitorcounter

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.preinstall = if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•Runtime dependency names matching Node built-ins: http

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

•scripts.preinstall = if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

pubmodules/cache/mongoose-cachegoose-fn.jsView file

943patternName = generic_password severity = medium line = 943

Medium

Secret Pattern

Package contains a possible secret pattern.

pubmodules/cache/mongoose-cachegoose-fn.jsView on unpkg · L943

945patternName = generic_password severity = medium line = 945

Medium

Secret Pattern

Hardcoded password in pubmodules/cache/mongoose-cachegoose-fn.js

pubmodules/cache/mongoose-cachegoose-fn.jsView on unpkg · L945

utils/jobs-worker-queue-manager/queueManagerClassV2.jsView file

270L271: // eval(fdata.function) L272:

Low

Eval

Package source references a known benign dynamic code generation pattern.

utils/jobs-worker-queue-manager/queueManagerClassV2.jsView on unpkg · L270

middleware/noentitycheck.jsView file

1var winston = require('../config/winston'); L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

middleware/noentitycheck.jsView on unpkg · L1

.tmp-github-search/chat21-web-widget/src/assets/onnx/ort-wasm-simd-threaded.wasmView file

•path = .tmp-github-search/chat21-web-widget/src/assets/onnx/ort-wasm-simd-threaded.wasm kind = wasm_module sizeBytes = 12361745 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

.tmp-github-search/chat21-web-widget/src/assets/onnx/ort-wasm-simd-threaded.wasmView on unpkg

archive.shView file

•path = archive.sh kind = build_helper sizeBytes = 2865 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

archive.shView on unpkg

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzView file

•path = .tmp-github-[redacted]-1.1.22.tgz kind = high_entropy_blob sizeBytes = 241786 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzView on unpkg

•path = .tmp-github-[redacted]-1.1.22.tgz kind = compressed_blob sizeBytes = 241786 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzView on unpkg

•path = .tmp-github-[redacted]-1.1.22.tgz kind = nested_archive_needs_inspection sizeBytes = 241786 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgzView on unpkg

.tmp-github-search/widget/deploy_amazon_beta.shView file

•path = .tmp-github-search/widget/deploy_amazon_beta.sh kind = payload_in_excluded_dir sizeBytes = 1988 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.tmp-github-search/widget/deploy_amazon_beta.shView on unpkg

app.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app.jsView on unpkg

pubmodules/sms/listener.jsView file

26patternName = generic_password severity = medium line = 26

Medium

Secret Pattern

Hardcoded password in pubmodules/sms/listener.js

pubmodules/sms/listener.jsView on unpkg · L26

pubmodules/voice-twilio/listener.jsView file

23patternName = generic_password severity = medium line = 23

Medium

Secret Pattern

Hardcoded password in pubmodules/voice-twilio/listener.js

pubmodules/voice-twilio/listener.jsView on unpkg · L23

pubmodules/voice/listener.jsView file

32patternName = generic_password severity = medium line = 32

Medium

Secret Pattern

Hardcoded password in pubmodules/voice/listener.js

pubmodules/voice/listener.jsView on unpkg · L32

pubmodules/tilebot/listener.jsView file

42patternName = generic_password severity = medium line = 42

Medium

Secret Pattern

Hardcoded password in pubmodules/tilebot/listener.js

pubmodules/tilebot/listener.jsView on unpkg · L42

pubmodules/whatsapp/listener.jsView file

26patternName = generic_password severity = medium line = 26

Medium

Secret Pattern

Hardcoded password in pubmodules/whatsapp/listener.js

pubmodules/whatsapp/listener.jsView on unpkg · L26

test/kbRoute.jsView file

196patternName = generic_password severity = medium line = 196

Medium

Secret Pattern

Hardcoded password in test/kbRoute.js

test/kbRoute.jsView on unpkg · L196

test/projectRoute.jsView file

64patternName = generic_password severity = medium line = 64

Medium

Secret Pattern

Hardcoded password in test/projectRoute.js

test/projectRoute.jsView on unpkg · L64

109patternName = generic_password severity = medium line = 109

Medium

Secret Pattern

Hardcoded password in test/projectRoute.js

test/projectRoute.jsView on unpkg · L109

test/authorization.jsView file

32patternName = generic_password severity = medium line = 32

Medium

Secret Pattern

Hardcoded password in test/authorization.js

test/authorization.jsView on unpkg · L32

test/authentication.jsView file

159patternName = generic_password severity = medium line = 159

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L159

235patternName = generic_password severity = medium line = 235

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L235

259patternName = generic_password severity = medium line = 259

Medium

Secret Pattern

Hardcoded password in test/authentication.js

test/authentication.jsView on unpkg · L259

.tmp-github-search/tiledesk-chatbot/tybotRoute/TdCache.jsView file

13patternName = generic_password severity = medium line = 13

Medium

Secret Pattern

Hardcoded password in .tmp-github-search/tiledesk-chatbot/tybotRoute/TdCache.js

.tmp-github-search/tiledesk-chatbot/tybotRoute/TdCache.jsView on unpkg · L13

Findings

1 Critical6 High23 Medium8 Low

CriticalManifest Confusionpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighShips High Entropy Blob.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgz

HighPayload In Excluded Dir.tmp-github-search/widget/deploy_amazon_beta.sh

HighNode Builtin Dependency Squatpackage.json

HighSemantic Analysis Limitedpackage.json

HighPrevious Version Dangerous Deltaapp.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumSecret Patternpubmodules/cache/mongoose-cachegoose-fn.js

MediumDynamic Requiremiddleware/noentitycheck.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Module.tmp-github-search/chat21-web-widget/src/assets/onnx/ort-wasm-simd-threaded.wasm

MediumShips Build Helperarchive.sh

MediumShips Compressed Blob.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgz

MediumStructural Risk Force Deep Review

MediumSecret Patternpubmodules/cache/mongoose-cachegoose-fn.js

MediumSecret Patternpubmodules/sms/listener.js

MediumSecret Patternpubmodules/voice-twilio/listener.js

MediumSecret Patternpubmodules/voice/listener.js

MediumSecret Patternpubmodules/tilebot/listener.js

MediumSecret Patternpubmodules/whatsapp/listener.js

MediumSecret Patterntest/kbRoute.js

MediumSecret Patterntest/projectRoute.js

MediumSecret Patterntest/authorization.js

MediumSecret Patterntest/authentication.js

MediumSecret Pattern.tmp-github-search/tiledesk-chatbot/tybotRoute/TdCache.js

LowScripts Present

LowEvalutils/jobs-worker-queue-manager/queueManagerClassV2.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNested Archive Needs Inspection.tmp-github-search/tiledesk/helm/releases/tiledesk-1.1.22.tgz

LowCopyleft License

Affected versions and remediation

This report applies to @tiledesk/tiledesk-server@2.20.1.

See all versions of @tiledesk/tiledesk-server for other recorded verdicts.

Review the evidence and your use of @tiledesk/tiledesk-server@2.20.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 16:58:38.015Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.