registry / @zuplo/editor / 1.0.38375433925
@zuplo/editor@1.0.38375433925
Local development editor for the Zuplo CLI
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection found a real cross-origin exposure in the local editor server, although file access is confined to the selected project and requires the server to be running. This supports a vulnerability warning, not a finding of malicious package behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user starts the exported local editor server and visits a hostile website in a browser while it is running.
Impact
A hostile website may read or modify files within the configured project directory.
Mechanism
The localhost server has no authentication in the file route chain, accepts cross-origin requests, and exposes routes that read or write project files.
AI rationale
Source inspection found a real cross-origin exposure in the local editor server, although file access is confined to the selected project and requires the server to be running. This supports a vulnerability warning, not a finding of malicious package behavior.
Evidence
dist/index.jsdist/chunks/chunk-C7VL3DX7.jsdist/chunks/chunk-7QJXNUVM.js
Network endpoints1
localhost (configured listener; default editor port 9100)
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- The exported local editor server listens on its configured host and a caller-supplied port; the host is localhost.
- The server reflects request origins through CORS and permits read and write methods.
- The file route reads a caller-selected path, and a second route writes the request body to a caller-selected path.
- The filesystem adapter resolves paths beneath the configured project directory and rejects unsafe path segments, limiting but not removing the exposure.
- The package describes itself as a local development editor.
Evidence against
- The server is bound to localhost, and its filesystem adapter confines file access to the configured project directory.
- The manifest has no lifecycle scripts, so the exposure requires the editor server to be started.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
4 flaggeddist/client/static/js/codemirror-6ITIKbGP.jsView file
7contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=R(i,t),o=a.text.length,d,f;function p(n,r){return jr(e,B(t,n),`div`,a,r)}function m(t,n,r){var i=Lr(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/client/static/js/codemirror-6ITIKbGP.jsView on unpkg · L7dist/client/static/ts.worker-DFduhuek.jsView file
6Cross-file remote execution chain: dist/client/static/ts.worker-DFduhuek.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L6: `).slice(2).join(`
L7: `))}},ee=class extends Error{constructor(e,t){super(e),this.name=`ListenerLeakError`,this.stack=t}},te=class extends Error{constructor(e,t){super(e),this.name=`ListenerRefusalError...
L8: `||e===` `}var li=class{constructor(e,t,n){this.changes=e,this.moves=t,this.hitTimeout=n}},ui=class{constructor(e,t){this.lineRangeMapping=e,this.changes=t}};function di(e,t,n=(e,t...
...
L43: `)}t.writeSync(r,`]
L44: `),t.closeSync(r),br(`endDumpTypes`),xr(`Dump types`,`beginDumpTypes`,`endDumpTypes`)}function x(){o&&t.writeFileSync(o,JSON.stringify(s))}e.dumpLegend=x})(Mr||={});var Nr=Mr.start...
L45: `,n=c;continue}c++}r
Findings
1 Critical2 High5 Medium4 Low
CriticalTrojan Source Unicodedist/client/static/js/codemirror-6ITIKbGP.js
HighCross File Remote Execution Contextdist/client/static/ts.worker-DFduhuek.js
HighSemantic Analysis Limiteddist/client/static/js/GraphiQLConsole-wAx7ClCE.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/client/static/ts.worker-DFduhuek.js
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @zuplo/editor@1.0.38375433925.
See all versions of @zuplo/editor for other recorded verdicts.
- Review the evidence and your use of @zuplo/editor@1.0.38375433925 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.