registry / iflow-engine-base / 3.12.19
iflow-engine-base@3.12.19
BIM Engine SDK for Vue2, Vue3, React and HTML
AI Security Review
scanned 10d ago · by lpm-firewall-aiA fixed-looking DeepSeek key is embedded in the client bundle and used for requests to DeepSeek, creating credential exposure and possible reuse risk. The transfer requires invoking the encoding API, so the source supports a warning but not a package block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A consumer calls oneClickEncoding.start() after creating the engine.
Impact
Consumers can recover and potentially reuse the embedded key; model properties leave the application when encoding runs. The source does not establish that the key is valid or that the transfer is malicious.
Mechanism
The feature gathers properties from selected model components and posts them to the DeepSeek chat endpoint using the embedded key as a bearer credential.
AI rationale
A fixed-looking DeepSeek key is embedded in the client bundle and used for requests to DeepSeek, creating credential exposure and possible reuse risk. The transfer requires invoking the encoding API, so the source supports a warning but not a package block.
Evidence
dist/chunks/engine-3d-COo_NGsu.jsdist/index.d.tspackage.json
Network endpoints1
api.deepseek.com/v1/chat/completions
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The shipped engine bundle contains a fixed-looking DeepSeek API key and uses api.deepseek.com as its default endpoint.
- Calling the encoding feature collects model component properties and posts them with that key to DeepSeek.
- The package exposes the feature through the engine API and a callable start method, so the transfer is user-invoked rather than an install-time action.
- The package manifest lists development and build scripts, with no install lifecycle hook.
Evidence against
- Source ties the external request to the encoding feature; inspected code does not send the key to an unrelated recipient.
- The manifest has no install lifecycle hook, and the SDK constructs the encoding helper without calling start.
Behavioral surface
CryptoDynamicRequireEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetry
Source & flagged code
8 flaggeddist/Cesium/Workers/transcodeKTX2.jsView file
25L26: import{a as on}from"./chunk-XR7MN4PJ.js";import{a as f}from"./chunk-DC3K7YTH.js";import{a as se}from"./chunk-PQ3V63XF.js";import{b as sn}from"./chunk-GF67PEXE.js";import{a as Vt,c ...
L27: "use strict"; return body.apply(this, arguments);
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/Cesium/Workers/transcodeKTX2.jsView on unpkg · L25dist/draco/draco_decoder.jsView file
7L8: var Module=typeof DracoDecoderModule!="undefined"?DracoDecoderModule:{};var readyPromiseResolve,readyPromiseReject;Module["ready"]=new Promise(function(resolve,reject){readyPromise...
L9: // EMSCRIPTEN_START_ASM
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/draco/draco_decoder.jsView on unpkg · L7dist/chunks/engine-3d-COo_NGsu.js
Findings
2 Critical2 High5 Medium6 Low
CriticalTrojan Source Unicodedist/chunks/engine-3d-COo_NGsu.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.d.ts
HighShips High Entropy Blobdist/assets/hdr/17.hdr
HighSemantic Analysis Limiteddist/Cesium/Workers/transcodeKTX2.js#virtual:normalized:round1
MediumDynamic Requiredist/draco/draco_decoder.js
MediumNetwork
MediumShips Wasm Moduledist/draco/draco_decoder.wasm
MediumOversized Source Filedist/bim-engine-sdk.umd.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/Cesium/Workers/transcodeKTX2.js
LowFilesystem
Low
Affected versions and remediation
This report applies to iflow-engine-base@3.12.19.
See all versions of iflow-engine-base for other recorded verdicts.
- Review the evidence and your use of iflow-engine-base@3.12.19 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.