@zuplo/editor@1.0.38818011753
Local development editor for the Zuplo CLI
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe source supports a local cross-origin proxy vulnerability, so this warrants a warning. The package’s agent-related scanner hints are benign editor code, and the inspected source does not establish malicious package behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The editor server is running while a user visits a webpage that sends a cross-origin request to the local editor.
Impact
Depending on browser protections and reachable services, this can expose local or internal HTTP responses to a remote webpage.
Mechanism
The proxy accepts caller-supplied HTTP(S) URLs, fetches them server-side, and returns the upstream response; CORS reflects the request origin and permits broad methods and headers.
AI rationale
The source supports a local cross-origin proxy vulnerability, so this warrants a warning. The package’s agent-related scanner hints are benign editor code, and the inspected source does not establish malicious package behavior.
Evidence
dist/chunks/chunk-7QJXNUVM.jsdist/index.jsdist/chunks/chunk-C7VL3DX7.js
Network endpoints1
localhost:9100/api/v1/test
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- The package exposes a local editor runtime and has no install lifecycle hook in its manifest.
- The editor test route accepts an HTTP(S) URL, fetches it from the server, and returns the upstream response body and headers.
- The test route is mounted under the API path, and CORS reflects the requesting origin while permitting common methods and headers.
- The server uses a localhost listener by default, which limits direct access but does not remove the cross-origin browser risk when the editor is running.
- The scanner’s cited editor integration locations describe IDE detection and cursor styling, not agent configuration changes.
Evidence against
- No install-time execution or agent configuration mutation was identified in the inspected source.
- The proxy is part of an editor test feature and the server binds to localhost by default; the concern is the cross-origin exposure of that local feature.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystem
Source & flagged code
5 flaggeddist/client/static/js/main-xTurUn0I.jsView file
9`+e.stack}}var me=Object.prototype.hasOwnProperty,he=t.unstable_scheduleCallback,ge=t.unstable_cancelCallback,_e=t.unstable_shouldYield,ve=t.unstable_requestPaint,ye=t.unstable_now...
L10: `).replace(Od,``)}function Ad(e,t){return t=kd(t),kd(e)===t}function jd(e,t,n,r,a,o){switch(n){case`children`:typeof r==`string`?t===`body`||t===`textarea`&&r===``||Vt(e,r):(typeof...
L11: `,``):String(n.body);return{path:t,submission:{formMethod:i,formAction:a,formEncType:n.formEncType,formData:void 0,json:void 0,text:e}}}else if(n.formEncType===`application/json`){...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/client/static/js/main-xTurUn0I.jsView on unpkg · L9dist/client/static/js/codemirror-6ITIKbGP.jsView file
7contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=R(i,t),o=a.text.length,d,f;function p(n,r){return jr(e,B(t,n),`div`,a,r)}function m(t,n,r){var i=Lr(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==
Critical
Findings
1 Critical2 High5 Medium4 Low
CriticalTrojan Source Unicodedist/client/static/js/codemirror-6ITIKbGP.js
HighCross File Remote Execution Contextdist/client/static/ts.worker-DFduhuek.js
HighSemantic Analysis Limiteddist/client/static/js/GraphiQLConsole-BLsglqnt.js
MediumDynamic Requiredist/client/static/js/main-xTurUn0I.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/client/static/ts.worker-DFduhuek.js
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @zuplo/editor@1.0.38818011753.
See all versions of @zuplo/editor for other recorded verdicts.
- Review the evidence and your use of @zuplo/editor@1.0.38818011753 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.