registry / @whfzgyx/ojo-canvas-sdk / 0.1.4

@whfzgyx/ojo-canvas-sdk@0.1.4

`@touchine/ojo-canvas-sdk` is the browser-facing OJO project canvas SDK.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

No confirmed malicious install or import-time attack surface is established. The main residual risk is package identity mismatch with a bundled browser canvas runtime.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User imports mountOjoCanvas or serves dist/runtime in a browser.

Impact

Runtime may call host-configured project/bridge endpoints and public asset CDN during normal canvas use; no source evidence of unconsented system mutation or exfiltration.

Mechanism

Browser iframe canvas SDK with host-supplied endpoints and static bundled runtime assets.

Rationale

Static inspection found a repackaged-looking browser SDK with identity mismatch, but no lifecycle hook, install-time mutation, credential collection, filesystem access, or concrete exfiltration path. The risky primitives are consistent with a canvas runtime that uses host-provided APIs and public assets.

Evidence

package.jsonREADME.mddist/host/index.jsdist/runtime/manifest.jsondist/runtime/index.htmldist/runtime/assets/contribution-2_nEDXgm.jsdist/runtime/assets/preview-mode-utils-CMIiGQEw.jsdist/runtime/assets/ja-CO70Pb1Z.js

Network endpoints1

irise-web-canvas-public-assets.rogerhorsleymorris.workers.dev/

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

package.json name differs from README/import examples, which identify @touchine/ojo-canvas-sdk.
Bundled browser runtime contains Codex/workspace bridge UI and HTTP/WebSocket bridge strings, but they are runtime features described in README.
Large minified dist/runtime/assets/contribution-2_nEDXgm.js includes broad app code, making provenance harder to verify.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hooks; only build/test/prepack scripts.
dist/host/index.js only mounts an iframe, validates options, and postMessages host config to the runtime origin.
No confirmed child_process, fs writes, persistence, credential harvesting, or install-time AI-agent control mutation found.
Network use is browser/runtime-aligned: host-provided project APIs and public canvas asset CDN in README/manifest.
Scanner secret/Trojan-source hits appear to be bundled Firebase/base64/i18n/minified UI content, not active exfiltration.

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 20 file(s), 3.39 MB of source, external domains: fb.me, figma.com, github.com, irise-resources-staging-us-east-1-972778198637.s3.us-east-1.amazonaws.com, irise-web-canvas-public-assets.rogerhorsleymorris.workers.dev, ojo.dev, prosemirror.net, radix-ui.com, react.dev, reactrouter.com, www.w3.org

Oversized source lightweight scan

dist/runtime/assets/contribution-2_nEDXgm.js3.70 MB file, sampled 256 KB

ChildProcessHighEntropyStringsMinifiedUrlStringsirise-web-canvas-public-assets.rogerhorsleymorris.workers.devwww.w3.org

Source & flagged code

4 flagged

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView file

Lines 11-39javascript

11/* [wrapped with `+t+`] */

12`)}var Tn,En=e((()=>{Tn=/\{(?:\n\/\* \[wrapped with .+\] \*\/)?\n?/}));function Dn(e){return function(){return e}}var On=e((()=>{})),kn,An=e((()=>{vt(),kn=function(){try{var e=_t(Object,`defineProperty`);return e({},``,{}),e}catch{}}()})),jn,Mn=e((()=>{On(),An(),Ge(),jn=kn?function(e,t){return kn(e,`toString`,{configurable:!0,enumerable:!1,value:Dn(t),writable:!0})}:We})),Nn,Pn=e((()=>{Mn(),_n(),Nn=pn(jn)}));function Fn(e,t){for(var n=-1,r=e==null?0:e.length;++n<r&&t(e[n],n,e)!==!1;);return e}var In=e((()=>{}));function Ln(e,t,n,r){for(var i=e.length,a=n+(r?1:-1);r?a--:++a<i;)if(t(e[a],a,e))re ...

13`:``;e.replace(f,function(t,n,r,i,a,o){return r||=i,d+=e.slice(l,o).replace(kO,lO),n&&(s=!0,d+=`' +

14__e(`+n+`) +

15'`),a&&(c=!0,d+=`';

16`+a+`;

17__p += '`),r&&(d+=`' +

18((__t = (`+r+`)) == null ? '' : __t) +

19'`),l=o+t.length,t}),d+=`';

20`;var m=AO.call(t,`variable`)&&t.variable;if(!m)d=`with (obj) {

21`+d+`

22}

23`;else if(EO.test(m))throw Error(xO);d=(c?d.replace(CO,``):d).replace(wO,`$1`).replace(TO,`$1;`),d=`function(`+(m||`obj`)+`) {

24`+(m?``:`obj || (obj = {});

25`)+`var __t, __p = ''`+(s?`, __e = _.escape`:``)+(c?`, __j = Array.prototype.join;

26function print() { __p += __j.call(arguments, '') }

27`:`;

28`)+d+`return __p

29}`;var h=qs(function(){return Function(a,p+`return `+d).apply(void 0,o)});if(h.source=d,Us(h))throw h;return h}var xO,SO,CO,wO,TO,EO,DO,OO,kO,AO,jO=e

30caused by [jsError]${e.name}-${e.message}`:`

31caused by [${e.code}]${e.msg}${e.ok?``:a(e.cause)}`}function o(e,r,i,o){let s={ok:!1,code:e,msg:r,cause:i,errorInfo:o,toString(){return`[${e}]${r}.${i?a(i):``}`},pair(){return[s,null]},stack:i instanceof Error?i.stack:void 0,findJsError:()=>n(s),[t]:!0};return s}function s(e,t,n){return o(e,t,void 0,n)}function c(e,t,n,r){return o(e,t,n,r)}e.makeError=s,e.makeErrorBy=c,e.makeOk=r,e.makeOkWith=i})),Z=Xj();function Zj(){if(typeof window>`u`)return!1;let e=window.location.hostname;return e===`localhost`||e===`127.0.0.1`}var Qj=`/api`,$j=`/`;function eM(e){return e?.trim().toLowerCase()??``}functi ...

High

High Secret

Package contains a high-severity secret pattern.

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView on unpkg · L31

High

Secret Pattern

Google API key in dist/runtime/assets/preview-mode-utils-CMIiGQEw.js

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView on unpkg · L31

32`).forEach(function(e){i=e.indexOf(`:`),n=e.substring(0,i).trim().toLowerCase(),r=e.substring(i+1).trim(),!(!n||t[n]&&lt[n])&&(n===`set-cookie`?t[n]?t[n].push(r)

33`)}getSetCookie(){return this.get(`set-cookie`)||[]}get[Symbol.toStringTag](){return`AxiosHeaders`}static from(e){return e instanceof this?e:new this(e)}static concat(e,...t){let n=new this(e);return t.forEach(e=>n.set(e)),n}static accessor(e){let t=(this[dt]=this[dt]={accessors:{}}).accessors,n=this.prototype;function r(e){let r=mt(e);t[r]||(xt(n,e),t[r]=!0)}return A.isArray(e)?e.forEach(r):r(e),this}};St.accessor([`Content-Type`,`Content-Length`,`Accept`,`Accept-Encoding`,`User-Agent`,`Authorization`]),A.reduceDescriptors(St.prototype,({value:e},t)=>{let n=t[0].toUpperCase()+t.slice(1);retur ...

34`+e.map(nn).join(`

35`):` `+nn(e[0]):`as no adapter specified`),`ERR_NOT_SUPPORT`)}return i}var on={getAdapter:an,adapters:tn};function sn(e){if(e.cancelToken&&e.cancelToken.throwIfRequested(),e.signal&&e.signal.aborted)throw new Tt(null,e)}function cn(e){return sn(e),e.headers

36`);return e===-1?``:t.stack.slice(e+1)})();try{if(!e.stack)e.stack=n;else if(n){let t=n.indexOf(`

37`),r=t===-1?-1:n.indexOf(`

38`,t+1),i=r===-1?``:n.slice(r+1);String(e.stack).endsWith(i)||(e.stack+=`

39`+n)}}catch{}}throw e}}_request(e,t){typeof e==`string`?(t||={},t.url=e):t=e||{},t=zt(this.defaults,t);let{transitional:n,paramsSerializer:r,headers:i}=t;n!==void 0&&fn.assertOptions(n,{silentJSONParsing:pn.transitional(pn.boolean),forcedJSONParsing:pn.transitional(pn.boolean),clarifyTimeoutError:pn.transitional(pn.boolean),legacyInterceptorReqResOrdering:pn.transitional(pn.boolean)},!1),r!=null&&(A.isFunction(r)?t.paramsSerializer={serialize:r}:fn.assertOptions(r,{encode:pn.function,serialize:pn.function},!0)),t.allowAbsoluteUrls!==void 0||(this.defaults.allowAbsoluteUrls===void 0?t.allowAbso ...

Long lines were clipped for display.

dist/runtime/assets/ja-CO70Pb1Z.jsView file

Lines 1-3javascript

1var e={common:{ok:`OK`,cancel:`キャンセル`,continue:`続ける`,close:`閉じる`,back:`戻る`,done:`完了`,save:`保存`,copy:`コピー`,retry:`再試行`,apply:`適用`,exit:`終了`,loading:`読み込み中...`,error:{somethingWentWrong:`問題が発生しました。`},language:{switch:`言語`,english:`English`,chinese:`中文`,chineseHongKong:`繁體中文`,japanese:

dist/runtime/assets/contribution-2_nEDXgm.jsView file

•path = [redacted]-2_nEDXgm.js kind = oversized_source_file sizeBytes = 3880836 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/runtime/assets/contribution-2_nEDXgm.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView file

31patternName = google_api_key severity = high line = 31 matchedText = caused b...it(`

High

High Secret

Package contains a high-severity secret pattern.

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView on unpkg · L31

31patternName = google_api_key severity = high line = 31 matchedText = caused b...it(`

High

Secret Pattern

Google API key in dist/runtime/assets/preview-mode-utils-CMIiGQEw.js

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView on unpkg · L31

dist/runtime/assets/ja-CO70Pb1Z.jsView file

3contains invisible/control Unicode U+200B (zero width space) これでターミナルに戻ることができます。`,authorizedCode:`認証されたデバイスコード`,authorizeAnother:`別のデバイスを認証する`,returnHome:`家に帰る`},confirm:{eyebrow:`CLI デバイスの認証`,title:`Ojo CLIを認可する`,description:`Ojo CLI へのアクセスを確認します。`,browserCode:`ブラウザ確認コード`,deviceCode:`デバイスコード`,approv

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/runtime/assets/ja-CO70Pb1Z.jsView on unpkg · L3

dist/runtime/assets/contribution-2_nEDXgm.jsView file

•path = [redacted]-2_nEDXgm.js kind = oversized_source_file sizeBytes = 3880836 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/runtime/assets/contribution-2_nEDXgm.jsView on unpkg

Findings

1 Critical3 High3 Medium6 Low

CriticalTrojan Source Unicodedist/runtime/assets/ja-CO70Pb1Z.js

HighHigh Secretdist/runtime/assets/preview-mode-utils-CMIiGQEw.js

HighOversized Source Filedist/runtime/assets/contribution-2_nEDXgm.js

HighSecret Patterndist/runtime/assets/preview-mode-utils-CMIiGQEw.js

MediumDynamic Require

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

4 flagged

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView file

Lines 11-39javascript

11/* [wrapped with `+t+`] */

13`:``;e.replace(f,function(t,n,r,i,a,o){return r||=i,d+=e.slice(l,o).replace(kO,lO),n&&(s=!0,d+=`' +

14__e(`+n+`) +

15'`),a&&(c=!0,d+=`';

16`+a+`;

17__p += '`),r&&(d+=`' +

18((__t = (`+r+`)) == null ? '' : __t) +

19'`),l=o+t.length,t}),d+=`';

20`;var m=AO.call(t,`variable`)&&t.variable;if(!m)d=`with (obj) {

21`+d+`

22}

23`;else if(EO.test(m))throw Error(xO);d=(c?d.replace(CO,``):d).replace(wO,`$1`).replace(TO,`$1;`),d=`function(`+(m||`obj`)+`) {

24`+(m?``:`obj || (obj = {});

25`)+`var __t, __p = ''`+(s?`, __e = _.escape`:``)+(c?`, __j = Array.prototype.join;

26function print() { __p += __j.call(arguments, '') }

27`:`;

28`)+d+`return __p

29}`;var h=qs(function(){return Function(a,p+`return `+d).apply(void 0,o)});if(h.source=d,Us(h))throw h;return h}var xO,SO,CO,wO,TO,EO,DO,OO,kO,AO,jO=e

30caused by [jsError]${e.name}-${e.message}`:`

High

High Secret

Package contains a high-severity secret pattern.

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView on unpkg · L31

High

Secret Pattern

Google API key in dist/runtime/assets/preview-mode-utils-CMIiGQEw.js

dist/runtime/assets/preview-mode-utils-CMIiGQEw.jsView on unpkg · L31

32`).forEach(function(e){i=e.indexOf(`:`),n=e.substring(0,i).trim().toLowerCase(),r=e.substring(i+1).trim(),!(!n||t[n]&&lt[n])&&(n===`set-cookie`?t[n]?t[n].push(r)

34`+e.map(nn).join(`

36`);return e===-1?``:t.stack.slice(e+1)})();try{if(!e.stack)e.stack=n;else if(n){let t=n.indexOf(`

37`),r=t===-1?-1:n.indexOf(`

38`,t+1),i=r===-1?``:n.slice(r+1);String(e.stack).endsWith(i)||(e.stack+=`

Long lines were clipped for display.

dist/runtime/assets/ja-CO70Pb1Z.jsView file

Lines 1-3javascript

dist/runtime/assets/contribution-2_nEDXgm.jsView file

•path = [redacted]-2_nEDXgm.js kind = oversized_source_file sizeBytes = 3880836 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/runtime/assets/contribution-2_nEDXgm.jsView on unpkg