registry / Credential exfiltration / @vtex/faststore-plugin-buyer-portal / 2.0.39

@vtex/faststore-plugin-buyer-portal@2.0.39

A plugin for faststore with buyer portal

AI Security Review

scanned 1d ago · by lpm-firewall-ai

Source confirms automatic credential forwarding to two fixed external agent origins, but does not establish that the recipients are unrelated or unauthorized. This warrants a warning for unresolved credential exposure rather than a publish block.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An authorized user opens either agent page and its iframe loads.

Impact

If the external recipient is not an authorized service, it could use the token to act with the user's VTEX account access.

Mechanism

The page sends the token and account context to the iframe with postMessage, restricted to the configured agent origin.

AI rationale

Evidence

src/features/shared/utils/cookie.tssrc/pages/buyer-organization-manager.tsxsrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxsrc/pages/order-entry.tsxsrc/features/order-entry/layouts/OrderEntryLayout.tsx

Network endpoints2

buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agentorder-entry-agent.vercel.app/app/order-entry-agent

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package reads the VTEX account authentication cookie into its client context.
The authorized buyer organization page passes that token to the B2B agent layout.
The B2B layout loads a fixed external agent host and sends it the token and account details when the iframe loads.
The authorized order-entry page also passes the token to its layout, which sends it with session and customer details to a second fixed external agent host.

Evidence against

Messages are sent to a fixed agent origin rather than to an arbitrary window.

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 758 file(s), 1.36 MB of source, external domains: analytics.vtex.com, b2bfaststoredev.vtexassets.com, beta.vtexobservability.com, buyer-bulk-ops-agent.vercel.app, jsonata.org, order-entry-agent.vercel.app, rc.vtex.com, stable.vtexobservability.com, test-store.vtex.com, vtex.vtexcommercestable.com.br, www.google.com

Source & flagged code

5 flagged

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

•Credential-bearing message sent to a fixed external iframe in src/features/b2b-[redacted].tsx: : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; const targetWindow = iframeRef.current?.contentWindow; targetWindow.postMessage( if (event.source !== iframeRef.current?.contentWindow) return; if (iframeRef.current?.contentWindow && vtexIdclientAutCookie) { <iframe

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

6const B2B_AGENT_URL = isDevelopment() ? "http://localhost:3001/app/buyer-bulk-ops-agent" : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; interface B2BAgentLayoutProps { vtexIdclientAutCookie: string; account: string; locale?: string; customerId?: string; userId?: string; } const containerStyle: React.CSSProperties = { display: "flex", flexDirection: "column", width: "100%",

Medium

Ai Review Evidence

The B2B layout loads a fixed external agent host and sends it the token and account details when the iframe loads.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L6

51targetWindow.postMessage( { type: "AUTH_TOKEN_UPDATE", vtexIdclientAutCookie, account, locale, customerId, userId, }, agentOrigin ); } function onMessage(event:

Medium

Ai Review Evidence

The B2B layout loads a fixed external agent host and sends it the token and account details when the iframe loads.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L51

src/features/shared/utils/cookie.tsView file

29export function getAuthCookie(data: LoaderData) { const authCookie = data?.req?.cookies[`${AUT_COOKIE_KEY}_${storeConfig?.api.storeId}`] ?? ""; return authCookie; } const valuesToRemove = ["vtex_session"]; export functi

Medium

Ai Review Evidence

The package reads the VTEX account authentication cookie into its client context.

src/features/shared/utils/cookie.tsView on unpkg · L29

src/pages/buyer-organization-manager.tsxView file

58const B2BAgentPage = (props: AuthRouteProps<B2BAgentPageData>) => { if (!props.authorized) return null; const cookieHeader = props.clientContext?.cookie ?? ""; const tokenFromContext = props.clientContext?.vtexIdclientAutCookie ?? ""; const { token: tokenFromCookie, accountFromCookie } = getAuthCookieInfo(cookieHeader); // Prefer a token-like value if available; otherwise extract from cookie header. const vtexIdclient

Medium

Stripped Provenance Metadata

The authorized buyer organization page passes that token to the B2B agent layout.

src/pages/buyer-organization-manager.tsxView on unpkg · L58

Source & flagged code

5 flagged · loading source

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

Medium

Ai Review Evidence

The B2B layout loads a fixed external agent host and sends it the token and account details when the iframe loads.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L6

Findings

1 Critical7 Medium4 Low

CriticalHardcoded Runtime Data Exfiltrationsrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumAi Review Evidencesrc/features/shared/utils/cookie.ts

MediumStripped Provenance Metadatasrc/pages/buyer-organization-manager.tsx

MediumAi Review Evidencesrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @vtex/faststore-plugin-buyer-portal@2.0.39.

See all versions of @vtex/faststore-plugin-buyer-portal for other recorded verdicts.

Review the evidence and your use of @vtex/faststore-plugin-buyer-portal@2.0.39 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 19:59:33.799Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.