botium-core@1.15.14
The Selenium for Chatbots
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not a confirmed malicious payload, but it has a default-on postinstall network report and ships private credential material in a sample. The credential exposure warrants a warning until its validity and revocation are resolved.
Static reason
One or more suspicious static signals were detected.
Trigger
npm installation runs the postinstall hook; use of the sample may expose its embedded credential material.
Impact
Installation metadata leaves the host, and the sample credential may permit unauthorized access if still valid.
Mechanism
Default-on installation telemetry and a shipped private-key sample.
AI rationale
This is not a confirmed malicious payload, but it has a default-on postinstall network report and ships private credential material in a sample. The credential exposure warrants a warning until its validity and revocation are resolved.
Evidence
package.jsonreport.jssamples/scripting/utterances/botium.jsonsrc/containers/plugins/SimpleRestContainer.jssrc/repos/GitRepo.js
Network endpoints1
v1.license.botium.cyaraportal.us
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- Install automatically runs a reporting script.
- The install report sends platform, architecture, package name, and version to a vendor host.
- The report is enabled by default and only disabled through an environment setting.
- A shipped sample configuration contains a private-key field.
Evidence against
- The reporting payload shown in source is limited to installation metadata, not environment contents or files.
- Runtime HTTP requests are part of the chatbot connector and use constructed request settings.
- Child-process and plugin loading features are invoked through configured repository or connector workflows, not at install time.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node ./report.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsamples/scripting/utterances/botium.jsonView file
8patternName = private_key_rsa
severity = critical
line = 8
matchedText = "DIALOGF...\n",
Critical
Critical Secret
Package contains a critical-looking secret pattern.
samples/scripting/utterances/botium.jsonView on unpkg · L88patternName = private_key_rsa
severity = critical
line = 8
matchedText = "DIALOGF...\n",
Critical
Secret Pattern
RSA private key in samples/scripting/utterances/botium.json
samples/scripting/utterances/botium.jsonFindings
2 Critical4 High5 Medium6 Low
CriticalCritical Secretsamples/scripting/utterances/botium.json
CriticalSecret Patternsamples/scripting/utterances/botium.json
HighInstall Time Lifecycle Scriptspackage.json
HighShips High Entropy Blobtest/convo/convos/tree/excel/testbotium.xlsx
HighPayload In Excluded Dirtest/convo/convos/tree/excel/testbotium.xlsx
HighSemantic Analysis Limiteddist/botium-cjs.js
MediumDynamic Requiredist/botium-cjs.js
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobtest/convo/convos/tree/excel/testbotium.xlsx
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to botium-core@1.15.14.
See all versions of botium-core for other recorded verdicts.
- Review the evidence and your use of botium-core@1.15.14 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.