registry / @validate.qa/runner / 1.0.100
@validate.qa/runner@1.0.100
validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package is a local Playwright test runner, and its credential helper uses configured test credentials with host and field checks. The flagged dynamic-execution and browser-credential findings were not supported as malicious behavior in the inspected source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when a user invokes it; the prepublishOnly hook builds the package during publishing.
Impact
No automatic credential theft, unrelated data collection, or concealed remote code execution was found.
Mechanism
Configured test credentials are used for scoped browser form fills, and the sign-in lease uses the configured runner server. The flagged remote-execution signal was not substantiated by the inspected code.
AI rationale
The package is a local Playwright test runner, and its credential helper uses configured test credentials with host and field checks. The flagged dynamic-execution and browser-credential findings were not supported as malicious behavior in the inspected source.
Evidence
dist/cli.jsdist/chunk-6NIT2CCH.mjsdist/chunk-MAO6ADAO.mjs
Network endpoints2
<configured serverUrl>/api/runner/signin-leaseapi.anthropic.com
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes an explicit CLI and lists only a prepublishOnly build hook; no install hook is declared.
- Credential tooling describes substituting configured test values server-side so the caller does not see or log them.
- The browser credential helper restricts fills to the app under test and can reject a mismatched login host.
- Password credentials are required to target password inputs.
- The sign-in lease request goes to the configured server URL, includes authorization, and rejects redirects.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationTelemetryUrlStrings
NoLicenseWildcardDependency
Oversized source lightweight scan
dist/chunk-5P4ANVDY.mjs5.95 MB file, sampled 256 KB
NetworkEnvironmentVarsHighEntropyStringsUrlStringsapi.anthropic.comapi.deepseek.comapi.groq.comapi.meta.aiapi.minimaxi.chatapi.x.aigenerativelanguage.googleapis.comopencode.aiopenrouter.ai
dist/chunk-HMUC3DKS.mjs9.49 MB file, sampled 256 KB
FilesystemEnvironmentVarsUrlStringswww.apache.org
dist/cli.js20.7 MB file, sampled 256 KB
NetworkEnvironmentVarsHighEntropyStringsUrlStrings127.0.0.1app.example.commths.bewww.apache.org
dist/credential-mcp-server.js4.09 MB file, sampled 256 KB
FilesystemNetworkEnvironmentVarsCryptoHighEntropyStringsUrlStrings127.0.0.1mths.be
dist/route-seed-worker.js10.5 MB file, sampled 256 KB
FilesystemEnvironmentVarsHighEntropyStringsUrlStringswww.apache.org
Source & flagged code
5 flaggeddist/chunk-6NIT2CCH.mjsView file
45var harness_init_script_js_1 = require_harness_init_script();
L46: exports.IS_CLOUD = (0, shared_1.parseBoolFlag)(process.env.RUNNER_CLOUD);
L47: var BROWSER_ENV_ALLOW_NAMES = /* @__PURE__ */ new Set([
...
L140: ]);
L141: var BROWSER_ENV_SECRET_NAME = new RegExp("(?:^|_)(?:TOKEN|SECRET|PASSWORD|PASSWD|PASSCODE|PASS|PAT|DSN|CREDENTIALS?|API_?KEY|PRIVATE_?KEY|ACCESS_?KEY)(?:_|$)|_KEY$|(?:^|_)AUTH$|^AU...
L142: function operatorBrowserEnvAllow(source) {
...
L639: exports.collectDescendants = collectDescendants;
L640: var node_child_process_1 = __require("child_process");
L641: var node_util_1 = __require("util");
...
L651: try {
L652: const { stdout } = await execFileAsync("ps", ["-A", "-o", "pid=,ppid=,command="], {
L653: maxBuffer: PS_BUFFER,
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
dist/chunk-6NIT2CCH.mjsView on unpkg · L45dist/chunk-MAO6ADAO.mjsView file
•Remote response is passed to a worker and executed with Node capabilities.
dist/chunk-MAO6ADAO.mjs:
__require,
// ../../node_modules[redacted].js
var require_addressparser = __commonJS({
"../../node_modules[redacted].js"(exports, module) {
function addressparser(str, options) {
exports.default = addressparser;
var require_err_helpers = __commonJS({
var require_err_proto = __commonJS({
dist/chunk-5P4ANVDY.mjs:
require_repo_acquire,
require_repo_snapshot_slim,
require_tar_isolated
require_repo_read_harvest
require_browser_config,
require_cli_argv_guard,
require_cli_browser_socket,
require_cli_credential_broker,
Critical
Remote Response Code Execution
Source passes code obtained from a remote response into a dynamic execution sink.
dist/chunk-MAO6ADAO.mjsView on unpkgdist/chunk-5P4ANVDY.mjsView file
453Cross-file remote execution chain: dist/chunk-5P4ANVDY.mjs spawns dist/chunk-6NIT2CCH.mjs; helper contains network access plus dynamic code execution.
L453: var gemini_quota_js_1 = require_gemini_quota();
L454: exports.AI_CALL_TIMEOUT_MS = Math.max(3e4, parseInt(process.env.AI_CALL_TIMEOUT_MS ?? "150000", 10));
L455: function parseIntEnv(value, fallback) {
...
L821: const timeout = AbortSignal.timeout(ACQUIRE_HTTP_TIMEOUT_MS);
L822: const res = await fetch(`${SERVER_URL}${path2}`, {
L823: method: "POST",
L824: headers: { "Content-Type": "application/json", Authorization: `Bearer ${authToken()}` },
L825: body: JSON.stringify(body),
L826: signal: signal ? AbortSignal.any([timeout, signal]) : timeout
...
L829: throw new Error(`HTTP ${res.status}`);
L830: return await res.json().catch(() => nu
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/chunk-5P4ANVDY.mjsView on unpkg · L453dist/credential-mcp-server.jsView file
•path = dist/credential-mcp-server.js
kind = oversized_source_file
sizeBytes = 4290177
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/credential-mcp-server.jsView on unpkgdist/cli.jsView file
•path = dist/cli.js
kind = oversized_cli_entrypoint
sizeBytes = 21723804
magicHex = [redacted]
Medium
Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/cli.jsView on unpkgFindings
2 Critical4 High7 Medium7 Low
CriticalBrowser Credential Phishingdist/chunk-6NIT2CCH.mjs
CriticalRemote Response Code Executiondist/chunk-MAO6ADAO.mjs
HighChild Process
HighShell
HighEval
HighCross File Remote Execution Contextdist/chunk-5P4ANVDY.mjs
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/credential-mcp-server.js
MediumOversized Cli Entrypointdist/cli.js
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @validate.qa/runner@1.0.100.
See all versions of @validate.qa/runner for other recorded verdicts.
- Review the evidence and your use of @validate.qa/runner@1.0.100 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.