registry / @validate.qa/runner / 1.0.109
@validate.qa/runner@1.0.109
validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.
AI Security Review
scanned 9h ago · by lpm-firewall-aiThe manifest identifies a local Playwright runner and declares no install-time hook. The flagged dynamic-code and credential patterns are consistent with test validation and provider-specific AI configuration; no attack behavior was identified.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user runs the validate-runner command to perform tests.
Impact
No malicious impact was identified in the reviewed source.
Mechanism
The reviewed dynamic function construction checks test-code syntax, and the write guard rejects tests that try to access protected guard handles through eval or new Function.
AI rationale
The manifest identifies a local Playwright runner and declares no install-time hook. The flagged dynamic-code and credential patterns are consistent with test validation and provider-specific AI configuration; no attack behavior was identified.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a local Playwright test runner connected to the validate.qa cloud.
- The only lifecycle script is prepublishOnly, which runs the build; no install hook is declared.
- Provider API keys are mapped to their corresponding providers, consistent with the runner’s AI features.
- The write guard rejects tests that use eval or new Function to access protected guard handles.
Evidence against
- The runner uses dynamic function construction to check generated test code, which may trigger remote-code-execution heuristics.
- The package runs local tests and uses configured provider credentials, so it has normal process and network capabilities.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationTelemetryUrlStrings
Source & flagged code
15 flaggeddist/discovery-mcp-server.jsView file
15};
L16: var __commonJS = (cb, mod) => function __require() {
L17: try {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/discovery-mcp-server.jsView on unpkg · L15dist/run-write-guard.jsView file
144ACTION_BATCH_MAX_SIZE = 10;
L145: MOBILE_SCREENSHOT_INTERVAL_MS = typeof process !== "undefined" ? parseInt(process.env?.MOBILE_SCREENSHOT_INTERVAL_MS ?? "500", 10) : 500;
L146: MOBILE_ACTION_BATCH_MAX_SIZE = 5;
...
L320: return false;
L321: if (typeof f.base64 !== "string" || f.base64.length === 0)
L322: return false;
...
L484: "javascript:",
L485: "data:",
L486: "vbscript:",
...
L1168: ``,
L1169: `main().catch((err) => { console.error(err); process.exitCode = 1; });`
L1170: ].join("\n");
Critical
Browser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
dist/run-write-guard.jsView on unpkg · L144Findings
3 Critical12 High7 Medium7 Low
CriticalBrowser Credential Phishingdist/run-write-guard.js
CriticalRemote Response Code Executiondist/chunk-2TPRQ45T.mjs
CriticalPrevious Version Dangerous Deltadist/cli.mjs
HighChild Process
HighShell
HighEval
HighBrowser Session Account Hijackdist/run-write-guard.js
HighCross File Remote Execution Contextdist/chunk-IWVPRZGD.mjs
HighSemantic Analysis Limiteddist/discovery-mcp-server.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritydist/tar-extract-child.js
HighKnown Malware Source Similaritydist/chunk-PUMRAFJS.mjs
HighKnown Malware Source Similaritydist/chunk-2TPRQ45T.mjs
Affected versions and remediation
This report applies to @validate.qa/runner@1.0.109.
See all versions of @validate.qa/runner for other recorded verdicts.
- Review the evidence and your use of @validate.qa/runner@1.0.109 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.