registry / @vtex/faststore-plugin-buyer-portal / 2.0.32

@vtex/faststore-plugin-buyer-portal@2.0.32

A plugin for faststore with buyer portal

AI Security Review

scanned 23d ago · by lpm-firewall-ai

The token forwarding is activated through an authorized product page and is constrained to a hard-coded iframe origin. No malicious lifecycle hook or other concrete attack behavior was found in the inspected paths.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An authorized user opens the buyer organization manager page.

Impact

No unbounded credential destination, install-time execution, or confirmed malicious behavior was found.

Mechanism

The page sends an authentication token to the fixed embedded agent origin through postMessage.

AI rationale

Evidence

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxsrc/pages/buyer-organization-manager.tsx

Network endpoints1

buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

Package scripts contain a prepare hook but no preinstall, install, or postinstall hook.
The B2B component derives a target origin from a fixed agent URL and posts its token only to that origin.
Inbound iframe messages must match both the fixed origin and the embedded iframe window.

Evidence against

The authorized B2B page extracts an authentication token and supplies it to an embedded remote agent.

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 757 file(s), 1.35 MB of source, external domains: analytics.vtex.com, b2bfaststoredev.vtexassets.com, beta.vtexobservability.com, buyer-bulk-ops-agent.vercel.app, jsonata.org, order-entry-agent.vercel.app, rc.vtex.com, stable.vtexobservability.com, test-store.vtex.com, vtex.vtexcommercestable.com.br, www.google.com

Source & flagged code

4 flagged

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Lines 31-84typescript

31};

33export const B2BAgentLayout = ({

34 vtexIdclientAutCookie,

35 account,

36 locale,

37 customerId,

38 userId,

39}: B2BAgentLayoutProps) => {

40 const { t } = useLocalization();

41 const iframeRef = useRef<HTMLIFrameElement>(null);

43 const agentOrigin = useMemo(() => new URL(B2B_AGENT_URL).origin, []);

45 useEffect(() => {

46 function postAuthToIframe() {

47 const targetWindow = iframeRef.current?.contentWindow;

48 if (!targetWindow) return;

50 // We send only the token (not the full Cookie header) to reduce exposure.

51 targetWindow.postMessage(

52 {

53 type: "AUTH_TOKEN_UPDATE",

54 vtexIdclientAutCookie,

55 account,

56 locale,

57 customerId,

58 userId,

59 },

60 agentOrigin

61 );

62 }

Low

Ai Review Evidence

The B2B component derives a target origin from a fixed agent URL and posts its token only to that origin.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L51

64 function onMessage(event: MessageEvent) {

65 // Only accept messages coming from the iframe's origin.

66 if (event.origin !== agentOrigin) return;

68 // Ensure the message is from the iframe window we embedded.

69 if (event.source !== iframeRef.current?.contentWindow) return;

Low

Ai Review Evidence

Inbound iframe messages must match both the fixed origin and the embedded iframe window.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L64

71 // Handshake: child tells it is ready; parent responds by sending auth.

72 if (event.data?.type === "B2B_AGENT_READY") {

73 postAuthToIframe();

74 }

75 }

77 window.addEventListener("message", onMessage);

79 // Fallback: try once after iframe load in case READY was missed.

80 const iframe = iframeRef.current;

81 const onLoad = () => {

82 // Small delay to allow the iframe app to attach its message listener.

83 setTimeout(() => {

84 postAuthToIframe();

•Credential-bearing message sent to a fixed external iframe in src/features/b2b-[redacted].tsx: : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; const targetWindow = iframeRef.current?.contentWindow; targetWindow.postMessage( if (event.source !== iframeRef.current?.contentWindow) return; if (iframeRef.current?.contentWindow && vtexIdclientAutCookie) { <iframe

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

package.jsonView file

Lines 1-39json

2 "name": "@vtex/faststore-plugin-buyer-portal",

3 "version": "2.0.32",

4 "description": "A plugin for faststore with buyer portal",

5 "main": "index.js",

Source & flagged code

4 flagged · loading source

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

51targetWindow.postMessage( { type: "AUTH_TOKEN_UPDATE", vtexIdclientAutCookie, account, locale, customerId, userId, }, agentOrigin ); } function onMessage(e

Low

Ai Review Evidence

The B2B component derives a target origin from a fixed agent URL and posts its token only to that origin.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L51

Findings

1 Critical3 Medium7 Low

CriticalHardcoded Runtime Data Exfiltrationsrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencesrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

Affected versions and remediation

This report applies to @vtex/faststore-plugin-buyer-portal@2.0.32.

See all versions of @vtex/faststore-plugin-buyer-portal for other recorded verdicts.

Review the evidence and your use of @vtex/faststore-plugin-buyer-portal@2.0.32 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-29 17:33:57.489Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.