@zuplo/editor@1.0.35395032411
Local development editor for the Zuplo CLI
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe source shows a concrete cross-origin exposure in the local editor API that can enable unauthorized project-file reads and writes. This warrants a warning as a vulnerability, but the inspected behavior does not establish package-driven malware or credential theft.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A developer starts the local editor server and visits an untrusted web page while it remains available.
Impact
An untrusted page may read project files or overwrite them; later code execution would require a separate action to run the modified files.
Mechanism
The server allows cross-origin requests and exposes filesystem-backed GET and POST routes without an authentication check in the inspected handlers.
AI rationale
The source shows a concrete cross-origin exposure in the local editor API that can enable unauthorized project-file reads and writes. This warrants a warning as a vulnerability, but the inspected behavior does not establish package-driven malware or credential theft.
Evidence
dist/chunks/chunk-HDZMPWV2.jsdist/chunks/chunk-C7VL3DX7.jsdist/index.js
Network endpoints1
localhost:9100
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- The manifest describes a local development editor and exposes importable runtime entrypoints.
- The editor app reflects each request's Origin in CORS responses and permits cross-origin methods including GET and POST.
- The local server defaults to localhost on port 9100 and binds using its configured host and port.
- The API mounts project file routes backed by a filesystem rooted at the selected source directory; those routes read and write files by request path.
- The scanner's agent-related matches are editor-detection metadata and Monaco cursor styling, not agent configuration writes.
- The filesystem adapter rejects parent-directory segments when resolving project paths.
Evidence against
- The source supports a local editor API, but does not establish that the package automatically starts it or sends project files to a publisher-controlled endpoint.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
5 flaggeddist/client/static/js/main-BgPFNza7.jsView file
•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/client/static/js/main-BgPFNza7.jsView on unpkg12L13: Please change the parent <Route path="${e}"> to <Route path="${e===`/`?`*`:`${e}/*`}">.`)}let f=Ga(),p;if(t){let e=typeof t==`string`?Tr(t):t;yr(u===`/`||e.pathname?.startsWith(u),...
L14: `);for(;n!==-1;){let e=s.slice(0,n);s=s.slice(n+1),e.trim()&&(yield i(e)),n=s.indexOf(`
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/client/static/js/main-BgPFNza7.jsView on unpkg · L12dist/client/static/js/codemirror-6ITIKbGP.jsView file
Findings
1 Critical2 High5 Medium4 Low
CriticalTrojan Source Unicodedist/client/static/js/codemirror-6ITIKbGP.js
HighCross File Remote Execution Contextdist/client/static/ts.worker-DFduhuek.js
HighSemantic Analysis Limiteddist/client/static/js/main-BgPFNza7.js
MediumDynamic Requiredist/client/static/js/main-BgPFNza7.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/client/static/ts.worker-DFduhuek.js
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @zuplo/editor@1.0.35395032411.
See all versions of @zuplo/editor for other recorded verdicts.
- Review the evidence and your use of @zuplo/editor@1.0.35395032411 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.