registry / iflow-engine-base / 3.12.18
iflow-engine-base@3.12.18
⚠ Under reviewBIM Engine SDK for Vue2, Vue3, React and HTML
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe manifest declares no install hook, and the inspected network feature is exposed as a model-encoding operation. The selected runtime dependency three remains unresolved, so its behavior cannot be cleared from the available source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The model-data transfer occurs when the encoding operation is invoked; the unresolved dependency may run as part of consumer installation or runtime resolution.
Impact
The reviewed source does not establish malicious intent or unauthorized transfer, but the dependency behavior could not be verified, so a clean verdict is not supported.
Mechanism
The encoding feature posts a chat-completion request to DeepSeek and includes model properties in its request body. The package also declares the unresolved runtime dependency three.
AI rationale
The manifest declares no install hook, and the inspected network feature is exposed as a model-encoding operation. The selected runtime dependency three remains unresolved, so its behavior cannot be cleared from the available source.
Evidence
package.jsondist/chunks/engine-3d-BKWXyaNA.jsdist/index.d.tsdist/draco/DRACOLoader.js
Network endpoints1
api.deepseek.com
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json declares three as a runtime dependency, and dist/draco/DRACOLoader.js imports it; its source could not be resolved in this review, leaving a selected dependency boundary unverified.
- The engine exposes a model-encoding feature that sends requests to DeepSeek using a built-in API key; its declaration allows a caller-supplied key.
- The encoding operation gathers model properties before calling the chat request, so model data is sent when that operation runs.
Evidence against
- The manifest has no install lifecycle hook. The inspected encoding request is tied to a callable feature, and no independent attack behavior was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
8 flaggeddist/chunks/sdk-vendor-CMEVZEox.jsView file
2274}, m.setImmediate = function(E) {
L2275: typeof E != "function" && (E = new Function("" + E));
L2276: for (var T = new Array(arguments.length - 1), C = 0; C < T.length; C++) T[C] = arguments[C + 1];
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/chunks/sdk-vendor-CMEVZEox.jsView on unpkg · L2274dist/draco/draco_decoder.jsView file
7L8: var Module=typeof DracoDecoderModule!="undefined"?DracoDecoderModule:{};var readyPromiseResolve,readyPromiseReject;Module["ready"]=new Promise(function(resolve,reject){readyPromise...
L9: // EMSCRIPTEN_START_ASM
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/draco/draco_decoder.jsView on unpkg · L7dist/chunks/engine-3d-BKWXyaNA.jsView file
Findings
2 Critical2 High5 Medium6 Low
CriticalTrojan Source Unicodedist/chunks/engine-3d-BKWXyaNA.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.d.ts
HighShips High Entropy Blobdist/assets/hdr/17.hdr
HighSemantic Analysis Limiteddist/Cesium/Workers/transcodeKTX2.js#virtual:normalized:round1
MediumDynamic Requiredist/draco/draco_decoder.js
MediumNetwork
MediumShips Wasm Moduledist/draco/draco_decoder.wasm
MediumOversized Source Filedist/bim-engine-sdk.umd.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/chunks/sdk-vendor-CMEVZEox.js
LowFilesystem
Low
Affected versions and remediation
This report applies to iflow-engine-base@3.12.18.
See all versions of iflow-engine-base for other recorded verdicts.
- Review the evidence and your use of iflow-engine-base@3.12.18 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.