diggylab-worker@0.1.36
DiggyLab Desktop Agent collects posts and information from Facebook Groups on a paired computer. (self-hosted scan worker)
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe explicit login path transfers Facebook session cookies to the package's default API, a recipient separate from Facebook, without recipient-specific consent. Because the cookies can authenticate the Facebook account, this is concrete credential disclosure.
Static reason
One or more suspicious static signals were detected.
Trigger
An operator invokes the worker login command and completes Facebook login or supplies Facebook cookies.
Impact
The API recipient receives reusable Facebook session cookies without a recipient-specific consent step.
Mechanism
After validating the session, the worker POSTs its serialized storage state to the configured API's worker session endpoint.
Attack narrative
When login completes, the worker uploads the Facebook session to the configured API before saving a local copy. The default recipient is api.diggylab.com, and another HTTPS host can be configured without a recipient allowlist. The login flow does not ask the operator to confirm disclosure to that recipient.
AI rationale
The explicit login path transfers Facebook session cookies to the package's default API, a recipient separate from Facebook, without recipient-specific consent. Because the cookies can authenticate the Facebook account, this is concrete credential disclosure.
Evidence
worker.js
Network endpoints1
api.diggylab.com/worker-node/session
Decision evidence
public snapshotAI called this Malicious at 91.0% confidence as Malware with low false-positive risk.
Evidence for block
- The login flow obtains a Facebook session through browser login or supplied cookies, then passes it to the session upload helper.
- The helper sends the session data in a POST to the worker session endpoint; requests use the configured API origin.
- The default recipient is api.diggylab.com. The API origin can be set by the caller, and packaged destinations are accepted over HTTPS without a host allowlist.
- The code saves a local session copy after the upload; the login flow has no recipient-specific consent check.
Evidence against
- The transfer happens when the operator invokes login, and the worker validates the Facebook session before uploading it.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node worker.js install-browser
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node worker.js install-browser
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgworker.jsView file
3// src/worker/cli.ts
L4: import { spawn } from "node:child_process";
L5: import { randomUUID } from "node:crypto";
High
Findings
4 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processworker.js
HighSandbox Evasion Gated Capabilityworker.js
HighRuntime Package Installworker.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to diggylab-worker@0.1.36.
See all versions of diggylab-worker for other recorded verdicts.
- Avoid installing diggylab-worker@0.1.36. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.