registry / Credential exfiltration / @yimou6/common-ui

@yimou6/common-ui

Vue3 Component Library

This report shows the evidence for @yimou6/common-ui@1.13.30. 1 of 20 known versions is blocked or flagged. The newest version, 1.15.0, is allowed. See all versions.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

The player performs an automatic transfer of the current page’s session token to a package-selected endpoint without recipient-specific consent. This is concrete credential exposure and warrants blocking publication.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A consumer renders the exported player component.

Impact

The endpoint receives the current page’s session token, which could allow authenticated access as that user.

Mechanism

The component calls a helper on mount; the helper extracts the access token from the authorized-token cookie and places it in the authorization header of a request to the hardcoded endpoint.

Attack narrative

When the player component mounts, it automatically invokes a helper that reads the page’s authorized-token cookie and sends its access token to a hardcoded private-network endpoint. The package exposes the helper and player through its standard entrypoints, and the CDN bundle contains the same transfer.

AI rationale

Evidence

package.jsones/index.mjslib/index.jses/components/tzj-player/src/yunzhiyanPlayer.vue2.mjslib/components/tzj-player/src/yunzhiyanPlayer.vue2.jses/components/tzj-player/src/yunzhiyan.mjslib/components/tzj-player/src/yunzhiyan.jscdn/index.cdn.js

Network endpoints1

192.168.111.212:8099/system/user/getInfo

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

The package exposes the player through its CommonJS and ES module entrypoints.
Mounting the player automatically calls the helper, without requiring a playback action.
The helper reads the access token from the page’s authorized-token cookie.
The helper sends that token to a fixed private-network endpoint unrelated to the requested device, and the CDN bundle contains the same request.

Evidence against

Behavioral surface

Source

CryptoEvalNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 326 file(s), 3.03 MB of source, external domains: 192.168.111.212, api.tianditu.gov.cn, npms.io, www.w3.org

Source & flagged code

7 flagged

cdn/index.cdn.jsView file

•Browser cookie sent to a fixed external endpoint in cdn/index.cdn.js: var jI=Object.defineProperty;var o=(W,_e)=>jI(W,"name",{value:_e,configurable:!0});(function(W,_e){typeof exports=="object"&&typeof module!="undefined"?_e(exports,require("element-... `)}o(Y_,"insertWrapDetails");function Ro(e){return function(){return e}}o(Ro,"constant");var Ar=function(){try{var e=Zt(Object,"defineProperty");return e({},"",{}),e}catch{}}(),J_=... * Lodash (Custom Build) <https://lodash.com/> * Copyright OpenJS Foundation and other contributors <https://openjsf.org/> * Released under MIT license <https://lodash.com/license> * Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE> * Lodash (Custom Build) <https://lodash.com/> * Copyright OpenJS Foundation and other contributors <https://openjsf.o

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

cdn/index.cdn.jsView on unpkg

lib/components/map/src/map.vue2.jsView file

46Trigger-reachable chain: manifest.main -> lib/index.js -> lib/components/map/index.js -> lib/components/map/src/map.vue2.js L46: const script = document.createElement("script"); L47: script.src = `https://api.tianditu.gov.cn/api?v=4.0&tk=${TIANDITU_TOKEN}`; L48: script.onload = () => { ... L78: if (!resp.ok) return []; L79: const data = await resp.json(); L80: if (data && data.pois) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

lib/components/map/src/map.vue2.jsView on unpkg · L46

package.jsonView file

59"main": "lib/index.js", "module": "es/index.mjs", "unpkg": "cdn/index.cdn.js", "jsdelivr": "cdn/index.cdn.js", "types": "es/index.d.ts", "publishConfig": { "access"

High

Ai Review Evidence