registry / Credential exfiltration / @vtex/faststore-plugin-buyer-portal / 2.0.40

@vtex/faststore-plugin-buyer-portal@2.0.40

A plugin for faststore with buyer portal

AI Security Review

scanned 14h ago · by lpm-firewall-ai

Both authenticated page flows send VTEX session credentials to fixed external agent origins without a recipient-specific approval gate. The source establishes the transfer but not recipient ownership or subsequent credential use, so warn about credential exposure without asserting malicious use.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An authorized user opens the buyer organization manager or order-entry page and its embedded iframe loads.

Impact

The remote recipient receives session credentials that may allow actions under the user's account; source does not show subsequent use.

Mechanism

The layouts send auth tokens and related account or session data to fixed Vercel origins through postMessage, after a readiness message or iframe load.

AI rationale

Evidence

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxsrc/pages/buyer-organization-manager.tsxsrc/features/order-entry/layouts/OrderEntryLayout.tsxsrc/pages/order-entry.tsx

Network endpoints2

buyer-bulk-ops-agent.vercel.apporder-entry-agent.vercel.app

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The B2B manager embeds a fixed external agent origin.
The B2B layout sends the VTEX auth token and account details to that origin.
The authorized B2B page derives the token from session context or cookies and passes it to the layout.
The order-entry layout uses a second fixed external agent origin and sends both auth token fields plus session context.
The authorized order-entry page derives the token and passes it to the layout.
Both layouts send authentication automatically after the iframe loads; no recipient-specific approval is shown.

Evidence against

Outbound messages are constrained to the iframe origin, and inbound messages are checked against that origin and window. The source does not establish how the remote apps use the credentials.

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

5 flagged

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Lines 1-73typescript

1import { useEffect, useMemo, useRef } from "react";

3import { useLocalization } from "../../../shared/localization/LocalizationContext";

4import { isDevelopment } from "../../../shared/utils/environment";

6const B2B_AGENT_URL = isDevelopment()

7 ? "http://localhost:3001/app/buyer-bulk-ops-agent"

8 : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent";

10interface B2BAgentLayoutProps {

11 vtexIdclientAutCookie: string;

Medium

Ai Review Evidence

The B2B manager embeds a fixed external agent origin.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L7

12 account: string;

13 locale?: string;

14 customerId?: string;

15 userId?: string;

16}

18const containerStyle: React.CSSProperties = {

19 display: "flex",

20 flexDirection: "column",

21 width: "100%",

22 height: "100vh",

23 overflow: "hidden",

24};

26const iframeStyle: React.CSSProperties = {

27 flex: 1,

33export const B2BAgentLayout = ({

34 vtexIdclientAutCookie,

35 account,

36 locale,

37 customerId,

38 userId,

39}: B2BAgentLayoutProps) => {

40 const { t } = useLocalization();

41 const iframeRef = useRef<HTMLIFrameElement>(null);

43 const agentOrigin = useMemo(() => new URL(B2B_AGENT_URL).origin, []);

45 useEffect(() => {

46 function postAuthToIframe() {

47 const targetWindow = iframeRef.current?.contentWindow;

48 if (!targetWindow) return;

50 // We send only the token (not the full Cookie header) to reduce exposure.

51 targetWindow.postMessage(

52 {

53 type: "AUTH_TOKEN_UPDATE",

54 vtexIdclientAutCookie,

55 account,

56 locale,

57 customerId,

58 userId,

59 },

60 agentOrigin

61 );

62 }

Medium

Ai Review Evidence

The B2B layout sends the VTEX auth token and account details to that origin.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L53

64 function onMessage(event: MessageEvent) {

65 // Only accept messages coming from the iframe's origin.

66 if (event.origin !== agentOrigin) return;

68 // Ensure the message is from the iframe window we embedded.

69 if (event.source !== iframeRef.current?.contentWindow) return;

71 // Handshake: child tells it is ready; parent responds by sending auth.

72 if (event.data?.type === "B2B_AGENT_READY") {

73 postAuthToIframe();

•Credential-bearing message sent to a fixed external iframe in src/features/b2b-[redacted].tsx: : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; const targetWindow = iframeRef.current?.contentWindow; targetWindow.postMessage( if (event.source !== iframeRef.current?.contentWindow) return; if (iframeRef.current?.contentWindow && vtexIdclientAutCookie) { <iframe

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

src/pages/buyer-organization-manager.tsxView file

Lines 48-106typescript

49 return { localizationLabels };

50 });

51};

53export const loader = withLoaderErrorBoundary(loaderFunction, {

54 componentName: "B2BAgentPage",

Source & flagged code

5 flagged · loading source

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg

7? "http://localhost:3001/app/buyer-bulk-ops-agent" : "https://buyer-bulk-ops-agent.vercel.app/app/buyer-bulk-ops-agent"; interface B2BAgentLayoutProps { vtexIdclientAutCookie:

Medium

Ai Review Evidence

The B2B manager embeds a fixed external agent origin.

src/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsxView on unpkg · L7

Findings

1 Critical7 Medium4 Low

CriticalHardcoded Runtime Data Exfiltrationsrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumAi Review Evidencesrc/features/b2b-agent/layouts/B2BAgentLayout/B2BAgentLayout.tsx

MediumStripped Provenance Metadatasrc/pages/buyer-organization-manager.tsx

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @vtex/faststore-plugin-buyer-portal@2.0.40.

See all versions of @vtex/faststore-plugin-buyer-portal for other recorded verdicts.

Review the evidence and your use of @vtex/faststore-plugin-buyer-portal@2.0.40 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 14:06:03.890Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.