botium-core@1.15.16
The Selenium for Chatbots
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has an automatic remote telemetry hook and exposes a private-key field in a sample, but direct inspection found no payload staging, secret harvesting, destructive action, or broad persistence. This is suspicious security hygiene, not demonstrated malware.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm installation runs postinstall.
Impact
The remote host receives installation metadata; the shipped key may grant access to its associated external service.
Mechanism
Automatic HTTPS telemetry and an exposed sample credential.
AI rationale
The package has an automatic remote telemetry hook and exposes a private-key field in a sample, but direct inspection found no payload staging, secret harvesting, destructive action, or broad persistence. This is suspicious security hygiene, not demonstrated malware.
Evidence
package.jsonreport.jssamples/scripting/utterances/botium.json
Network endpoints1
v1.license.botium.cyaraportal.us
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- Install automatically runs a telemetry reporter.
- The reporter posts platform, architecture, package name, and version to a remote host unless opted out.
- A sample configuration contains a hard-coded private-key field.
Evidence against
- The install hook has no file writes, command execution, payload download, or credential harvesting.
- The reporter constructs a limited telemetry payload and exits successfully on errors.
- Runtime HTTP requests use configured chatbot endpoints rather than a hidden fixed endpoint.
- The flagged spreadsheet is a normal XLSX test fixture, not an executable payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.postinstall = node ./report.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkgsamples/scripting/utterances/botium.jsonView file
8patternName = private_key_rsa
severity = critical
line = 8
Critical
Critical Secret
Package contains a critical-looking secret pattern.
samples/scripting/utterances/botium.jsonView on unpkg · L8Findings
2 Critical5 High6 Medium6 Low
CriticalCritical Secretsamples/scripting/utterances/botium.json
CriticalSecret Patternsamples/scripting/utterances/botium.json
HighInstall Time Lifecycle Scriptspackage.json
HighShips High Entropy Blobtest/convo/convos/tree/excel/testbotium.xlsx
HighPayload In Excluded Dirtest/convo/convos/tree/excel/testbotium.xlsx
HighSemantic Analysis Limiteddist/botium-cjs.js
HighPrevious Version Dangerous Deltadist/botium-cjs.js
MediumDynamic Requiredist/botium-cjs.js
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobtest/convo/convos/tree/excel/testbotium.xlsx
Medium
Affected versions and remediation
This report applies to botium-core@1.15.16.
See all versions of botium-core for other recorded verdicts.
- Review the evidence and your use of botium-core@1.15.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.