registry / Credential exfiltration / @vtex/faststore-plugin-buyer-portal / 2.0.35

@vtex/faststore-plugin-buyer-portal@2.0.35

A plugin for faststore with buyer portal

AI Security Review

scanned 8d ago · by lpm-firewall-ai

Authenticated page flows disclose existing VTEX credentials to package-selected external agent recipients without recipient-specific consent. This is concrete credential exposure and warrants blocking publication.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An authorized user opens either agent page; the parent sends authentication data when the iframe loads or signals readiness.

Impact

The agent recipients receive credentials that can expose the user's VTEX account and related session context.

Mechanism

The layouts use postMessage to send VTEX tokens and, on the order-entry page, session and account data to the embedded agent origin.

Attack narrative

When an authorized user opens either embedded agent page, the package sends the user's existing VTEX authentication token to a hardcoded Vercel-hosted recipient. The order-entry page also forwards session and account context. The inspected code shows no recipient-specific consent gate for these transfers.

AI rationale

Evidence

src/pages/order-entry.tsxsrc/features/order-entry/layouts/OrderEntryLayout.tsxsrc/pages/buyer-organization-manager.tsxsrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

Network endpoints2

order-entry-agent.vercel.app/app/order-entry-agentbuyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent

Decision evidence

public snapshot

AI called this Malicious at 95.0% confidence as Malware with low false-positive risk.

Evidence for block

The order-entry route derives an existing VTEX authentication token and passes it to the embedded layout.
The order-entry layout sends that token, session data, and account identifiers to a hardcoded Vercel-hosted agent.
The buyer organization manager route obtains an existing VTEX token and passes it to its agent layout.
The buyer agent layout sends the token and account identifiers to a hardcoded Vercel-hosted agent.
The layouts send authentication data automatically when their embedded agents signal readiness or load.

Evidence against

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 758 file(s), 1.36 MB of source, external domains: analytics.vtex.com, b2bfaststoredev.vtexassets.com, beta.vtexobservability.com, buyer-bulk-ops-agent.vercel.app, jsonata.org, order-entry-agent.vercel.app, rc.vtex.com, stable.vtexobservability.com, test-store.vtex.com, vtex.vtexcommercestable.com.br, www.google.com

Source & flagged code

5 flagged

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

•Credential-bearing message sent to a fixed external iframe in src/features/b2b-[redacted].tsx: : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; const targetWindow = iframeRef.current?.contentWindow; targetWindow.postMessage( if (event.source !== iframeRef.current?.contentWindow) return; if (iframeRef.current?.contentWindow && vtexIdclientAutCookie) { <iframe

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

src/pages/order-entry.tsxView file

Lines 80-137typescript

80};

82export const loader = withLoaderErrorBoundary(loaderFunction, {

83 componentName: "OrderEntryPage",

84 redirectToError: true,

85});

87const OrderEntryPage = (props: AuthRouteProps<OrderEntryPageData>) => {

88 if (!props.authorized) return null;

90 const cookieHeader = props.clientContext?.cookie ?? "";

91 const tokenFromContext = props.clientContext?.vtexIdclientAutCookie ?? "";

93 const {

94 token: tokenFromCookie,

95 accountFromCookie,

96 segment,

97 session,

98 } = getAuthCookieInfo(cookieHeader);

100 // Prefer a token-like value if available; otherwise extract from cookie header.

101 const vtexIdclientAutCookie =

102 tokenFromContext && !tokenFromContext.includes("=")

103 ? tokenFromContext

104 : tokenFromCookie;

105

106 if (!vtexIdclientAutCookie) {

High

Ai Review Evidence

The order-entry route derives an existing VTEX authentication token and passes it to the embedded layout.

src/pages/order-entry.tsxView on unpkg · L100

107 throw new Error("Missing VTEX auth token for B2B Agent iframe");

108 }

109

110 // account/locale via discovery.config (recomendado)

111 const account = storeConfig?.api?.storeId ?? accountFromCookie ?? "";

112 const locale = storeConfig?.session?.locale ?? "en-US";

113

114 const customerId = props.clientContext?.customerId;

115 const userId = props.clientContext?.userId;

116

117 return (

118 <LocalizationProvider labels={props.data?.localizationLabels ?? {}}>

119 <OrderEntryLayout

120 vtexIdclientAutCookie={vtexIdclientAutCookie}

121 vtexIdclientAutCookie_client={vtexIdclientAutCookie}

122 segment={segment}

123 session={session}

High

Ai Review Evidence

The order-entry route derives an existing VTEX authentication token and passes it to the embedded layout.

src/pages/order-entry.tsxView on unpkg · L117

124 account={account}

125 locale={locale}

126 customerId={customerId}

127 userId={userId}

128 />

129 </LocalizationProvider>

130 );

131};

132

133export default withErrorBoundary(OrderEntryPage, {

134 onError: (error) => {

135 console.error("onError", error);

136 },

137 tags: {

src/features/order-entry/layouts/OrderEntryLayout.tsxView file

Lines 1-30typescript

1import { useEffect, useMemo, useRef } from "react";

3import storeConfig from "discovery.config";

5import { useRouter } from "next/router";

Source & flagged code

5 flagged · loading source

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

src/pages/order-entry.tsxView file

100// Prefer a token-like value if available; otherwise extract from cookie header. const vtexIdclientAutCookie = tokenFromContext && !tokenFromContext.includes("=") ? tokenFromContext : tokenFromCookie; if

High

Ai Review Evidence

The order-entry route derives an existing VTEX authentication token and passes it to the embedded layout.

Findings

1 Critical4 High3 Medium4 Low

CriticalHardcoded Runtime Data Exfiltrationsrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

HighAi Review Evidencesrc/pages/order-entry.tsx

HighAi Review Evidencesrc/features/order-entry/layouts/OrderEntryLayout.tsx

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @vtex/faststore-plugin-buyer-portal@2.0.35.

See all versions of @vtex/faststore-plugin-buyer-portal for other recorded verdicts.

Avoid installing @vtex/faststore-plugin-buyer-portal@2.0.35. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-15 12:35:39.449Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

Other credential exfiltration packages

Source & flagged code

Related packages

Other credential exfiltration packages