registry / @vtex/faststore-plugin-buyer-portal / 2.0.31

@vtex/faststore-plugin-buyer-portal@2.0.31

A plugin for faststore with buyer portal

AI Security Review

scanned 25d ago · by lpm-firewall-ai

The token forwarding is tied to a hardcoded iframe origin and guarded message handshake, rather than an operator-configurable or unrestricted recipient. Static inspection found no registry install hook or other concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An authorized user opens the buyer organization manager page and its iframe loads or completes its readiness handshake.

Impact

The intended buyer-agent application receives the user authentication token; no unrestricted destination, install-time mutation, or confirmed malicious behavior was found.

Mechanism

The layout derives one fixed origin from the iframe URL, targets messages to that origin, and verifies origin and source window for incoming messages.

AI rationale

Network endpoints1

buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

The manifest has no preinstall, install, or postinstall hook; its only lifecycle entry is prepare for Husky.
The required layout uses a fixed buyer-agent origin and posts authentication data only to that derived origin.
The layout checks both the message origin and the embedded iframe window before responding to messages.

Evidence against

The private buyer-organization-manager page forwards a VTEX authentication token to the hardcoded external buyer-agent iframe.

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 757 file(s), 1.35 MB of source, external domains: analytics.vtex.com, b2bfaststoredev.vtexassets.com, beta.vtexobservability.com, buyer-bulk-ops-agent.vercel.app, jsonata.org, order-entry-agent.vercel.app, rc.vtex.com, stable.vtexobservability.com, test-store.vtex.com, vtex.vtexcommercestable.com.br, www.google.com

Source & flagged code

5 flagged

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

•Credential-bearing message sent to a fixed external iframe in src/features/b2b-[redacted].tsx: : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; const targetWindow = iframeRef.current?.contentWindow; targetWindow.postMessage( if (event.source !== iframeRef.current?.contentWindow) return; if (iframeRef.current?.contentWindow && vtexIdclientAutCookie) { <iframe

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

6const B2B_AGENT_URL = isDevelopment() ? "http://localhost:3001/app/buyer-bulk-ops-agent" : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; interface B2BAgentLayoutProps { vtexIdclient

Low

Ai Review Evidence

The required layout uses a fixed buyer-agent origin and posts authentication data only to that derived origin.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L6

45useEffect(() => { function postAuthToIframe() { const targetWindow = iframeRef.current?.contentWindow; if (!targetWindow) return; // We send only the token (not the full Cookie header) to reduce exposure. targetWindow.postMessage( { type: "AUTH_TOKEN_UPDATE", vtexIdclientAutCookie, account, locale, customerId, userId,

Low

Ai Review Evidence

The required layout uses a fixed buyer-agent origin and posts authentication data only to that derived origin.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L45

60agentOrigin ); } function onMessage(event: MessageEvent) { // Only accept messages coming from the iframe's origin. if (event.origin !== agentOrigin)

Low

Ai Review Evidence

The layout checks both the message origin and the embedded iframe window before responding to messages.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L60

package.jsonView file

19"i18n:check": "node scripts/check-localization-keys.mjs check --base=main", "i18n:refresh": "node scripts/check-localization-keys.mjs refresh", "prepare": "husky", "release": "yarn release:stable", "release:stable": "yarn check --integrity

Low

Suspicious Lifecycle Evidence

The manifest has no preinstall, install, or postinstall hook; its only lifecycle entry is prepare for Husky.

package.jsonView on unpkg · L19

Source & flagged code

5 flagged · loading source

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

Low

Ai Review Evidence

The required layout uses a fixed buyer-agent origin and posts authentication data only to that derived origin.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L6

Findings

1 Critical3 Medium8 Low

CriticalHardcoded Runtime Data Exfiltrationsrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencesrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

Affected versions and remediation

This report applies to @vtex/faststore-plugin-buyer-portal@2.0.31.

See all versions of @vtex/faststore-plugin-buyer-portal for other recorded verdicts.

Review the evidence and your use of @vtex/faststore-plugin-buyer-portal@2.0.31 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-28 08:44:47.797Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.