@zoryn/component@1.1.17
Vue 3 + TypeScript 企业级组件库（pnpm monorepo）。对外主包 `@zoryn/component`，组件 `Z` 前缀，支持完整导入与按需导入。
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe preview automatically sends spreadsheet cell content and internal diagnostics to a fixed localhost endpoint without disclosure or consent. This hidden collection supports a malicious data-exfiltration verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Mounting the grid import preview, or subsequent data or theme updates.
Impact
A service listening on the local endpoint can receive spreadsheet content and internal rendering details without the user's knowledge.
Mechanism
The preview POSTs the first cell and style diagnostics to a fixed localhost URL, suppressing request failures.
Attack narrative
When the grid import preview mounts, it automatically writes spreadsheet data and POSTs the first cell plus rendering diagnostics to a hard-coded localhost debug endpoint. The collection is not disclosed or tied to a user-configured service, and request failures are silently ignored.
AI rationale
The preview automatically sends spreadsheet cell content and internal diagnostics to a fixed localhost endpoint without disclosure or consent. This hidden collection supports a malicious data-exfiltration verdict.
Evidence
es/components/grid-import/src/spreadsheet/import-univer-preview.vue_vue_type_script_setup_true_lang.mjs
Network endpoints1
127.0.0.1:7826/ingest/c4c6e4fe-09d8-4594-a5a0-28b897d88389
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The grid import preview sends the first spreadsheet cell to a hard-coded localhost debug endpoint in a POST request.
- The same endpoint receives spreadsheet style and rendering diagnostics in additional POST requests.
- The preview calls the data-writing function automatically when mounted, triggering these requests without a separate user action.
Evidence against
- The behavior is in the grid import preview component, rather than being triggered by importing the package generally.
- The reported Unicode pattern in the minified bundle is an escaped CodeMirror special-character regex.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
WildcardDependency
Source & flagged code
5 flaggedlib/components/form-designer/src/designer/components/FnEditor.jsView file
85try {
L86: fn = new Function("return function (" + this.argStr + "){\n" + str + "\n}")();
L87: } catch (e) {
Low
Eval
Package source references a known benign dynamic code generation pattern.
lib/components/form-designer/src/designer/components/FnEditor.jsView on unpkg · L85dist/index.full.min.jsView file
183contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=lt(i,t),o=a.text.length,d,f;function p(n,r){return Or(e,_t(t,n),`div`,a,r)}function m(t,n,r){var i=Pr(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/index.full.min.jsView on unpkg · L183Findings
1 Critical2 High5 Medium4 Low
CriticalTrojan Source Unicodedist/index.full.min.js
HighSemantic Analysis Limiteddist/index.css
HighAi Review Evidencees/components/grid-import/src/spreadsheet/import-univer-preview.vue_vue_type_script_setup_true_lang.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.full.mjs
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowEvallib/components/form-designer/src/designer/components/FnEditor.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @zoryn/component@1.1.17.
See all versions of @zoryn/component for other recorded verdicts.
- Avoid installing @zoryn/component@1.1.17. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.