canvasxpress-cli@68.9.0
Node program to run canvasXpress in the command line
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not evidence of deliberate malware, but it exposes a serious user-invoked rendering attack surface through unsafe Chromium flags and dynamic evaluation. Warn rather than block because no automatic trigger or concrete malicious payload was found.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs a render command with a remote input page or data that reaches the bundled renderer.
Impact
A malicious page or crafted rendering input could execute browser-side code with unnecessarily broad local-file access.
Mechanism
Unsafe browser launch and eval-based rendering of untrusted content.
AI rationale
This is not evidence of deliberate malware, but it exposes a serious user-invoked rendering attack surface through unsafe Chromium flags and dynamic evaluation. Warn rather than block because no automatic trigger or concrete malicious payload was found.
Evidence
cmds/io.jssrc/canvasXpress.jssrc/canvasXpress.html
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- The render command opens a user-selected URL in Chromium with sandboxing disabled and local-file access enabled.
- The CLI evaluates code in the browser after loading the selected page, extending the effect of hostile input pages.
- The bundled canvas library contains several eval-based paths for serialized callbacks and expressions.
Evidence against
- There are no npm lifecycle scripts or self-dependencies.
- The risky browser flow requires an explicit CLI render command.
- No credential harvesting, environment access, or package-originated exfiltration was found.
- The dynamic require only loads a user-selected local canvas command.
Behavioral surface
ChildProcessDynamicRequireEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
5 flaggedsrc/canvasXpress.jsView file
26*/
L27: (function(b,a){if(typeof exports==="object"){a(exports)}else{(a((b.CanvasXpress=b.CanvasXpress||{})))}}(this,(function(){var a=(typeof CanvasXpress==="function")?CanvasXpress:null;...
L28: exports['init'] = CanvasXpress;
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
src/canvasXpress.jsView on unpkg · L2626*/
L27: (function(b,a){if(typeof exports==="object"){a(exports)}else{(a((b.CanvasXpress=b.CanvasXpress||{})))}}(this,(function(){var a=(typeof CanvasXpress==="function")?CanvasXpress:null;...
L28: exports['init'] = CanvasXpress;
Low
Eval
Package source references a known benign dynamic code generation pattern.
src/canvasXpress.jsView on unpkg · L26index.jsView file
1const minimist = require('minimist');
L2: const path = require('path');
Medium
Findings
2 High4 Medium6 Low
HighObfuscated Payload Loadersrc/canvasXpress.js
HighSemantic Analysis Limitedpackage.json
MediumDynamic Requireindex.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumAi Review Evidencecmds/io.js
LowEvalsrc/canvasXpress.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to canvasxpress-cli@68.9.0.
See all versions of canvasxpress-cli for other recorded verdicts.
- Review the evidence and your use of canvasxpress-cli@68.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.