@tiledesk/tiledesk-server@2.22.7
The Tiledesk server module
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe AMQP code execution is a concrete dangerous runtime capability with no validation or sandboxing. Static source does not establish an install-time malware chain or exfiltration, so a warning is proportionate.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A publisher sends a message with topic functions to the configured AMQP broker.
Impact
A broker publisher can execute code with the server process permissions.
Mechanism
AMQP-delivered code passed to new Function.
AI rationale
The AMQP code execution is a concrete dangerous runtime capability with no validation or sandboxing. Static source does not establish an install-time malware chain or exfiltration, so a warning is proportionate.
Evidence
utils/jobs-worker-queue-manager/queueManagerClassV2.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The AMQP worker compiles and runs JavaScript taken from a received message.
- The automatic preinstall hook conditionally writes an npm token to a project .npmrc file.
- Payment module source is deliberately obfuscated.
Evidence against
- The code-execution path requires a message on the configured AMQP broker rather than package installation.
- No source evidence shows secret harvesting, external exfiltration, or destructive install behavior.
- The preinstall hook is gated by ENABLE_ENTERPRISE_MODULE and only configures npm authentication.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
22 flagged · loading sourcepackage.jsonView file
•dependencies registry_only=@tiledesk-ent/tiledesk-server-enterprise,@tiledesk-ent/tiledesk-server-jwthistory,@tiledesk-ent/tiledesk-server-payments,@tiledesk-ent/tiledesk-server-request-history,@tiledesk-ent/tiledesk-server-visitorcounter
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.preinstall = if [ $ENABLE_ENTERPRISE_MODULE ]; then npm run enable-ent; fi
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•Runtime dependency names matching Node built-ins: http
High
Node Builtin Dependency Squat
Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkg•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5
Findings
1 Critical3 High20 Medium7 Low
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighNode Builtin Dependency Squatpackage.json
HighSemantic Analysis Limitedpackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternpubmodules/cache/mongoose-cachegoose-fn.js
MediumDynamic Requiremiddleware/noentitycheck.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperarchive.sh
MediumStructural Risk Force Deep Review
MediumSecret Patternpubmodules/cache/mongoose-cachegoose-fn.js
MediumSecret Pattern
Affected versions and remediation
This report applies to @tiledesk/tiledesk-server@2.22.7.
See all versions of @tiledesk/tiledesk-server for other recorded verdicts.
- Review the evidence and your use of @tiledesk/tiledesk-server@2.22.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.