registry / Remote code execution / getfloorplan-gltf-widget

getfloorplan-gltf-widget

Widget for GLTF estate plans.

This report shows the evidence for getfloorplan-gltf-widget@1.13.6. 1 of 16 known versions is blocked or flagged. The newest version, 1.17.4, is flagged. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

This is a concrete remote code-execution primitive, despite being gated behind an explicitly enabled debug plugin. No install-time behavior was found.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Consumer imports/installs DebugPanelPlugin, opens it, and triggers its report.

Impact

Remote code execution in the host page context.

Mechanism

Remote JavaScript fetch followed by eval

Attack narrative

DebugPanelPlugin's report path fetches draco_wasm_wrapper.js from a mutable gstatic URL, slices the returned source, and evaluates it with eval(). No hash, signature, or bundled copy constrains the executed JavaScript. A response changed at that endpoint can execute arbitrary code in the application that enabled the plugin.

AI rationale

This is a concrete remote code-execution primitive, despite being gated behind an explicitly enabled debug plugin. No install-time behavior was found.

Evidence

package.jsonbuild/plugins/DebugPanelPlugin.jsbuild/createWidget.js

Network endpoints2

www.gstatic.com/draco/v1/decoders/draco_wasm_wrapper.jswww.gstatic.com/draco/v1/decoders/draco_decoder.wasm

Decision evidence

public snapshot

AI called this Malicious at 97.0% confidence as Malware with low false-positive risk.

Evidence for block

build/plugins/DebugPanelPlugin.js fetches remote JavaScript from gstatic.
It passes fetched text to eval() without integrity pinning.
The evaluated code runs in the host page context.

Evidence against

package.json has no npm lifecycle hooks.
The behavior is limited to the separately exported DebugPanelPlugin.
Execution requires enabling the debug panel/report.

Behavioral surface

Source

ChildProcessEvalNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

scanned 10 file(s), 2.48 MB of source, external domains: developer.mozilla.org, developers.facebook.com, docs.sentry.io, en.wikipedia.org, example.com, gist.github.com, github.com, issuetracker.google.com, npms.io, null.example, react.dev, reactjs.org, webostv.developer.lge.com, www.euclideanspace.com, www.example.com, www.gamedev.net, www.gstatic.com, www.w3.org

Oversized source lightweight scan

build/createWidget.js

Source & flagged code

5 flagged

build/plugins/SentryPlugin.jsView file

Lines 3551-3591javascript

3551}

3552function Zu(t, e) {

3553 const n = t.indexOf("://") <= 0 && t.indexOf("//") !== 0, r = n ? Jh : void 0;

3554 try {

3555 if ("canParse" in URL && !URL.canParse(t, r))

3556 return;

3557 const s = new URL(t, r);

3558 return n ? {

3559 isRelative: n,

3560 pathname: s.pathname,

3561 search: s.search,

3562 hash: s.hash

3563 } : s;

3564 } catch {

3565 }

3566}

3567function Qh(t) {

3568 if (Qu(t))

3569 return t.pathname;

3570 const e = new URL(t);

3571 return e.search = "", e.hash = "", ["80", "443"].includes(e.port) && (e.port = ""), e.password && (e.password = "%filtered%"), e.username && (e.username = "%filtered%"

3572}

3573function We(t) {

3574 if (!t)

3575 return {};

3576 const e = t.match(/^(([^:/?#]+):)?(\/\/([^/?#]*))?([^?#]*)(\?(

3577 if (!e)

3578 return {};

3579 const n = e[6] || "", r = e[8] || "";

3580 return {

3581 host: e[4],

3582 path: e[5],

3583 protocol: e[2],

3584 search: n,

3585 hash: r,

3586 relative: e[5] + n + r

3587 // everything minus origin

3588 };

3589}

3590function Zh(t) {

3591 return t.split(/[?#]/, 1)[0];

build/plugins/DebugPanelPlugin.jsView file

Lines 498-538javascript

498})(BufferViewUsage$1 || (BufferViewUsage$1 = {}));

499var TextureChannel;

500(function(r) {

501 r[r.R = 4096] = "R", r[r.

build/createWidget.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = getfloorplan-gltf-widget@1.13.3 matchedIdentity = npm:[redacted]:1.13.3 similarity = 0.818 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

build/createWidget.jsView on unpkg

Source & flagged code

5 flagged · loading source

build/plugins/SentryPlugin.jsView file

3571patternName = generic_password severity = medium line = 3571 matchedText = return e...g();

Medium

Secret Pattern

Package contains a possible secret pattern.

build/plugins/SentryPlugin.jsView on unpkg · L3571

build/plugins/DebugPanelPlugin.jsView file

518if (typeof Buffer > "u") { L519: const t = atob(e.split(",")[1]), o = new Uint8Array(t.length); L520: for (let s = 0; s < t.length; s++) ... L551: * L552: * Reference: [glTF → Data Alignment](https://github.[redacted].0#data-alignment) L553: */ ... L702: static extension(e) { L703: if (e.startsWith("data:image/")) { L704: const t = e.match(/data:(image\/\w+)/)[1]; ... L7828: try { L7829: (t = navigator == null ? void 0 : navigator.clipboard) == null || t.writeText(`${e.value}`), throwCopyBlob(r); L7830: } catch (o) {

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

build/plugins/DebugPanelPlugin.jsView on unpkg · L518

Findings

3 Critical2 High4 Medium4 Low

CriticalRemote Asset Decode Executebuild/plugins/DebugPanelPlugin.js

CriticalTrigger Reachable Dangerous Capabilitybuild/plugins/DebugPanelPlugin.js

CriticalPrevious Version Dangerous Deltabuild/createWidget.js

HighChild Process

HighEvalbuild/plugins/DebugPanelPlugin.js

MediumSecret Patternbuild/plugins/SentryPlugin.js

MediumNetwork

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to getfloorplan-gltf-widget@1.13.6.

The versions list below shows the verdict for each recorded version.

Avoid installing getfloorplan-gltf-widget@1.13.6. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-04 10:52:19.729Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

16 known versions

1.17.4latestSuspicious—WarnPublishedSep 2, 2026, 7:57 AM 1.17.3Suspicious—WarnPublishedSep 1, 2026, 7:22 AM 1.17.2Suspicious—WarnPublishedAug 31, 2026, 12:54 PM 1.17.1Suspicious—WarnPublishedAug 31, 2026, 11:35 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Related packages

Other remote code execution packages

Source & flagged code