registry / Credential exfiltration / @validate.qa/runner
@validate.qa/runner
validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.
This report shows the evidence for @validate.qa/runner@1.0.101. 1 of 55 known versions is blocked or flagged. The newest version, 1.0.109, is allowed. See all versions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiGenerated auth-needed tests can capture the full browser storage state after login and send it to the configured Validate server. That state can contain app-session cookies or tokens, and the transfer is enabled by default rather than requiring explicit consent.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
An auth-needed test is generated and run with shared auth enabled and cloud task variables present.
Impact
The server receives browser session data, including app-session cookies or tokens that may permit account access.
Mechanism
The test serializes the browser context's storageState and POSTs it to the configured server's /api/runner/runs/{runId}/auth-state endpoint.
Attack narrative
When a generated test needs authentication, shared auth injection is enabled by default unless explicitly disabled. With cloud task variables set, the test captures the browser's full storageState and sends it to the configured Validate server. This transfers app-session credentials without an explicit opt-in at the capture call site.
AI rationale
Generated auth-needed tests can capture the full browser storage state after login and send it to the configured Validate server. That state can contain app-session cookies or tokens, and the transfer is enabled by default rather than requiring explicit consent.
Evidence
dist/chunk-4SZC5ZX3.mjs
Network endpoints1
process.env.VALIDATE_SERVER_URL/api/runner/runs/{runId}/auth-state
Decision evidence
public snapshotAI called this Malicious at 91.0% confidence as Malware with low false-positive risk.
Evidence for block
- The generated auth block applies only when a test has an authentication recipe and auth is needed.
- Shared auth injection is enabled unless SHARED_AUTH_INJECT is set to false.
- With cloud task variables present, the generated test captures the browser context's storageState and POSTs it to the configured server's auth-state endpoint.
- The README describes a local runner that polls the cloud for pending test runs.
Evidence against
- The transfer requires an auth-needed test-generation path and cloud task variables; it is not an install-time action.
- The package is presented as a cloud-connected test runner, so sharing test-session state may support its intended workflow.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationTelemetry
Source & flagged code
9 flaggeddist/discovery-mcp-server.jsView file
15};
L16: var __commonJS = (cb, mod) => function __require() {
L17: try {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/discovery-mcp-server.jsView on unpkg · L15dist/run-write-guard.jsView file
138ACTION_BATCH_MAX_SIZE = 10;
L139: MOBILE_SCREENSHOT_INTERVAL_MS = typeof process !== "undefined" ? parseInt(process.env?.MOBILE_SCREENSHOT_INTERVAL_MS ?? "500", 10) : 500;
L140: MOBILE_ACTION_BATCH_MAX_SIZE = 5;
...
L314: return false;
L315: if (typeof f.base64 !== "string" || f.base64.length === 0)
L316: return false;
...
L478: "javascript:",
L479: "data:",
L480: "vbscript:",
...
L1162: ``,
L1163: `main().catch((err) => { console.error(err); process.exitCode = 1; });`
L1164: ].join("\n");
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
dist/run-write-guard.jsView on unpkg · L138Findings
3 Critical6 High7 Medium7 Low
CriticalBrowser Credential Phishingdist/run-write-guard.js
CriticalRemote Response Code Executiondist/chunk-FQUH2PU2.mjs
CriticalPrevious Version Dangerous Deltadist/chunk-4SZC5ZX3.mjs
HighChild Process
HighShell
HighEval
HighBrowser Session Account Hijackdist/run-write-guard.js
HighCross File Remote Execution Contextdist/chunk-4SZC5ZX3.mjs
HighSemantic Analysis Limiteddist/discovery-mcp-server.mjs#virtual:normalized:round1
MediumDynamic Requiredist/discovery-mcp-server.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/credential-mcp-server.js
Affected versions and remediation
This report applies to @validate.qa/runner@1.0.101.
The versions list below shows the verdict for each recorded version.
- Avoid installing @validate.qa/runner@1.0.101. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.