Loading npm security reports…

@zerogpu/browser-extension-sdk@0.2.2: Malicious npm security | LPM Firewall

registry / @zerogpu/browser-extension-sdk / 0.2.2

@zerogpu/browser-extension-sdk@0.2.2

ZeroGPU device-side SLM runtime SDK for browsers and Chrome (MV3) extensions

AI Security Review

scanned 12h ago · by lpm-firewall-ai

At runtime the SDK registers a detailed browser/device profile and accepts WebSocket work containing a tracking-script URL. It then executes that remote script through a hosted runner or script injection.

Static reason

One or more suspicious static signals were detected.

Trigger

A consumer initializes the SDK; the orchestrator sends a request with trackingScript.

Impact

Remote code can run in a page/runner context, while browser identity, page context, and optional location are transmitted to the vendor service.

Mechanism

Server-directed remote script execution plus browser-profile collection.

Attack narrative

On SDK initialization, the package builds a detailed profile including user/device identifiers, URL/referrer, and optional location, then posts it to the vendor orchestrator. Runtime WebSocket requests may include trackingScript; the package passes that URL to a hosted runner or injects it as a script element, explicitly treating successful load as execution. The package also offers an explicit CLI that modifies an extension manifest for broad host access and automatic startup.

Rationale

The package contains a concrete server-directed remote-code execution path and substantial browser-context collection. Its lifecycle hook is not install-time, but that does not mitigate the runtime payload mechanism.

Evidence

package.jsonbin/zerogpu.mjsdist/extension/zerogpu-offscreen.js

Network endpoints2

devices.zerogpu.aizerogpu-browser-sdk.pages.dev/tag-runner.html

Source & flagged code

5 flagged · loading source

dist/assets/transformers.min.jsView file

27!*** ./node_modules/onnxruntime-common/dist/lib/tensor-impl.js ***! L28: \*****************************************************************/(e,t,n)=>{n.r(t),n.d(t,{Tensor:()=>a});const r="undefined"!=typeof BigInt64Array&&"function"==typeof BigInt64Arra... L29: /*!************************************************************!*\ ... L33: !*** ./node_modules/onnxruntime-web/dist/ort-web.min.js ***! L34: \**********************************************************/(module,__unused_webpack_exports,__webpack_require__)=>{var e;self,e=__WEBPACK_EXTERNAL_MODULE__1670__=>(()=>{var __webp... L35: /*!**********************************!*\ ... L66: !*** ./src/env.js ***! L67: \********************/(e,t,n)=>{n.r(t),n.d(t,{env:()=>g});var r=n(/*! fs */"?569f"),o=n(/*! path */"?3f59"),i=n(/*! url */"?

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/assets/transformers.min.jsView on unpkg · L27

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/assets/transformers.min.jsView on unpkg

33!*** ./node_modules/onnxruntime-web/dist/ort-web.min.js ***! L34: \**********************************************************/(module,__unused_webpack_exports,__webpack_require__)=>{var e;self,e=__WEBPACK_EXTERNAL_MODULE__1670__=>(()=>{var __webp... L35: /*!**********************************!*\

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/transformers.min.jsView on unpkg · L33

dist/extension/zerogpu-offscreen.jsView file

3945const importStart = performance.now(); L3946: const transformersModule = await import(/* @vite-ignore */ runtimeUrl); L3947: const pipeline = transformersModule?.pipeline;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/extension/zerogpu-offscreen.jsView on unpkg · L3945

dist/assets/ort-wasm-threaded.wasmView file

•path = dist/assets/ort-wasm-threaded.wasm kind = wasm_module sizeBytes = 9149637 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/assets/ort-wasm-threaded.wasmView on unpkg

Source & flagged code

5 flagged

dist/assets/transformers.min.jsView file

27!*** ./node_modules/onnxruntime-common/dist/lib/tensor-impl.js ***! L28: \*****************************************************************/(e,t,n)=>{n.r(t),n.d(t,{Tensor:()=>a});const r="undefined"!=typeof BigInt64Array&&"function"==typeof BigInt64Arra... L29: /*!************************************************************!*\ ... L33: !*** ./node_modules/onnxruntime-web/dist/ort-web.min.js ***! L34: \**********************************************************/(module,__unused_webpack_exports,__webpack_require__)=>{var e;self,e=__WEBPACK_EXTERNAL_MODULE__1670__=>(()=>{var __webp... L35: /*!**********************************!*\ ... L66: !*** ./src/env.js ***! L67: \********************/(e,t,n)=>{n.r(t),n.d(t,{env:()=>g});var r=n(/*! fs */"?569f"),o=n(/*! path */"?3f59"),i=n(/*! url */"?

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/assets/transformers.min.jsView on unpkg · L27

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/assets/transformers.min.jsView on unpkg

33!*** ./node_modules/onnxruntime-web/dist/ort-web.min.js ***! L34: \**********************************************************/(module,__unused_webpack_exports,__webpack_require__)=>{var e;self,e=__WEBPACK_EXTERNAL_MODULE__1670__=>(()=>{var __webp... L35: /*!**********************************!*\

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/transformers.min.jsView on unpkg · L33

dist/extension/zerogpu-offscreen.jsView file

Lines 3925-3965javascript

3925};

3926

3927const measure = async (fn) => {

3928 const start = performance.now();

dist/assets/ort-wasm-threaded.wasmView file

•path = dist/assets/ort-wasm-threaded.wasm kind = wasm_module sizeBytes = 9149637 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/assets/ort-wasm-threaded.wasmView on unpkg