registry / @validate.qa/runner / 1.0.104
@validate.qa/runner@1.0.104
validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe inspected code fits a local Playwright runner: its credential-related logic checks browser-state token expiry, while sign-in lease traffic uses the configured runner server. The only lifecycle script is prepublishOnly, which runs the build; the scanner’s critical leads were not confirmed as malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The CLI and test-runner features operate when invoked by the user or an integrating runner.
Impact
No malicious impact identified.
Mechanism
Inspected credential-related code checks browser-state token expiry; the sign-in lease request targets the runner’s configured server. The flagged remote-execution sink was not confirmed in the inspected chunk.
AI rationale
The inspected code fits a local Playwright runner: its credential-related logic checks browser-state token expiry, while sign-in lease traffic uses the configured runner server. The only lifecycle script is prepublishOnly, which runs the build; the scanner’s critical leads were not confirmed as malicious behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a local Playwright test runner and exposes dist/cli.js as its command-line entry point.
- The package’s prepublishOnly script runs the build; no install hook is declared.
- The run-write guard inspects browser storage tokens to determine expiry, rather than sending token values.
- The sandbox helper is invoked with a timeout and a restricted environment containing PATH.
- The sign-in lease request uses the configured server URL and authorization header for the runner’s sign-in lease endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationTelemetryUrlStrings
NoLicenseWildcardDependency
Source & flagged code
15 flaggeddist/discovery-mcp-server.jsView file
15};
L16: var __commonJS = (cb, mod) => function __require() {
L17: try {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/discovery-mcp-server.jsView on unpkg · L15dist/run-write-guard.jsView file
144ACTION_BATCH_MAX_SIZE = 10;
L145: MOBILE_SCREENSHOT_INTERVAL_MS = typeof process !== "undefined" ? parseInt(process.env?.MOBILE_SCREENSHOT_INTERVAL_MS ?? "500", 10) : 500;
L146: MOBILE_ACTION_BATCH_MAX_SIZE = 5;
...
L320: return false;
L321: if (typeof f.base64 !== "string" || f.base64.length === 0)
L322: return false;
...
L484: "javascript:",
L485: "data:",
L486: "vbscript:",
...
L1168: ``,
L1169: `main().catch((err) => { console.error(err); process.exitCode = 1; });`
L1170: ].join("\n");
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
dist/run-write-guard.jsView on unpkg · L144Findings
3 Critical12 High7 Medium7 Low
CriticalBrowser Credential Phishingdist/run-write-guard.js
CriticalRemote Response Code Executiondist/chunk-OXDU6ARE.mjs
CriticalPrevious Version Dangerous Deltadist/chunk-EBWZ7NGU.mjs
HighChild Process
HighShell
HighEval
HighBrowser Session Account Hijackdist/run-write-guard.js
HighCross File Remote Execution Contextdist/chunk-EBWZ7NGU.mjs
HighSemantic Analysis Limiteddist/discovery-mcp-server.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritydist/tar-extract-child.js
HighKnown Malware Source Similaritydist/chunk-PUMRAFJS.mjs
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @validate.qa/runner@1.0.104.
See all versions of @validate.qa/runner for other recorded verdicts.
- Review the evidence and your use of @validate.qa/runner@1.0.104 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.