registry / @windmill-labs/components / 1.782.0
@windmill-labs/components@1.782.0
The Windmill frontend written in Svelte 5 + Tailwind CSS
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe static block signal is a false positive: the lifecycle command conditionally executes a file that is not present. Inspected source shows a browser/UI package with user-triggered API and expression-evaluation features, not a concrete malicious chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm installation invokes postinstall; normal UI use invokes API requests and user-authored expression evaluation.
Impact
No install-time mutation, persistence, credential harvesting, or exfiltration established.
Mechanism
guarded absent-script postinstall; browser-side application utilities
AI rationale
The static block signal is a false positive: the lifecycle command conditionally executes a file that is not present. Inspected source shows a browser/UI package with user-triggered API and expression-evaluation features, not a concrete malicious chain.
Evidence
package.jsonpackage/ata/apis.jspackage/utils.jspackage/components/copilot/chat/global/diffSnapshot.test.jspackage/gen/core/request.jspackage/components/flows/utils.svelte.jspackage/components/apps/components/helpers/eval.jspackage/components/copilot/prompts/yaml2json.py
Network endpoints2
data.jsdelivr.comcdn.jsdelivr.net
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a postinstall command using fs and execSync.
Evidence against
- The postinstall target scripts/untar_ui_builder.js is absent, so its existsSync guard makes installation a no-op.
- No scripts/ or dist/ directory exists in the extracted package.
- No package source imports Node fs, child_process, network, or shell modules.
- package/components/copilot/chat/global/diffSnapshot.test.js is a Vitest cache/diff test, not runtime behavior.
- package/components/copilot/prompts/yaml2json.py is a local YAML-to-JSON build helper.
- Function uses in package/utils.js and UI helpers evaluate Windmill user-authored expressions at runtime; no exfiltration or hidden execution chain found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.postinstall = node -e "if (require('fs').existsSync('./scripts/untar_ui_builder.js')) { require('child_process').execSync('node ./scripts/untar_ui_builder.js', {stdio: 'inherit'}) }"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "if (require('fs').existsSync('./scripts/untar_ui_builder.js')) { require('child_process').execSync('node ./scripts/untar_ui_builder.js', {stdio: 'inherit'}) }"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgpackage.json#scripts.postinstallView file
1if (require('fs').existsSync('./scripts/untar_ui_builder.js')) { require('child_process').execSync('node ./scripts/untar_ui_builder.js', {stdio: 'inherit'}) }
Findings
2 Critical1 High5 Medium6 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalPrevious Version Dangerous Deltapackage/components/copilot/chat/global/diffSnapshot.test.js
HighInstall Time Lifecycle Scriptspackage.json
MediumDynamic Requirepackage.json#scripts.postinstall
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperpackage/components/copilot/prompts/yaml2json.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License
Affected versions and remediation
This report applies to @windmill-labs/components@1.782.0.
See all versions of @windmill-labs/components for other recorded verdicts.
- Review the evidence and your use of @windmill-labs/components@1.782.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.