iflow-engine-base@4.1.17
BIM Engine SDK for Vue2, Vue3, React and HTML
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe AI encoding feature has a plausible reason to process model properties, and the transfer requires an explicit start() call. Because the package sends that project data to a hard-coded third-party service without a visible disclosure or consent step, treat it as a runtime data-sharing risk and warn rather than block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
An application calls oneClickEncoding.start().
Impact
Project model properties are shared with a third-party service; the package does not establish that users are informed before the transfer.
Mechanism
The method collects properties from matching model components and posts them in batches to https://api.deepseek.com/v1/chat/completions with a bundled bearer key.
AI rationale
The AI encoding feature has a plausible reason to process model properties, and the transfer requires an explicit start() call. Because the package sends that project data to a hard-coded third-party service without a visible disclosure or consent step, treat it as a runtime data-sharing risk and warn rather than block.
Evidence
dist/chunks/EngineKernel-Bzn2f2uI.js
Network endpoints1
api.deepseek.com/v1/chat/completions
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The engine creates a OneClickEncoding instance during initialization.
- Its start() method gathers matching model components and their properties, then sends batches for encoding.
- The chat request posts those batches to api.deepseek.com using a hard-coded bearer key.
- The package source does not show a disclosure or consent step explaining that model properties go to DeepSeek.
Evidence against
- The network request is reached through the explicit start() method; constructing the feature alone does not send model data.
- package.json declares no install, preinstall, or postinstall lifecycle script.
- Sending model properties to an AI service is consistent with the encoding feature’s purpose.
Behavioral surface
CryptoEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
8 flaggeddistGaussian/gaussian.umd.jsView file
1(function(rt,St){typeof exports=="object"&&typeof module<"u"?St(exports,require("three"),require("@mkkellogg/gaussian-splats-3d")):typeof define=="function"&&define.amd?define(["ex...
L2: \0`,ie+=g(Q,2),ie+=C.magic,ie+=g(m,2),ie+=g(_,2),ie+=g(oe.crc32,4),ie+=g(oe.compressedSize,4),ie+=g(oe.uncompressedSize,4),ie+=g(i.length,2),ie+=g(H.length,2),{fileRecord:T.LOCAL_F...
L3: `)}return u},a.decode=function(d,x){if(typeof d!="string")throw new TypeError('"input" must be a string.');if(typeof x!="string")throw new TypeError('"alphabet" must be a string.')...
Low
Eval
Package source references a known benign dynamic code generation pattern.
distGaussian/gaussian.umd.jsView on unpkg · L1dist/chunks/EngineKernel-Bzn2f2uI.jsView file
7526contains invisible/control Unicode U+200C (zero width non-joiner)
extended<U+200C> = /* @__PURE__ */ new Map();
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/chunks/EngineKernel-Bzn2f2uI.jsView on unpkg · L7526Findings
3 Critical2 High4 Medium6 Low
CriticalTrojan Source Unicodedist/chunks/EngineKernel-Bzn2f2uI.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.d.ts
CriticalPrevious Version Dangerous Deltadist/chunks/sdk-vendor-3G5leDKK.js
HighShips High Entropy Blobdist/assets/hdr/17.hdr
HighSemantic Analysis Limiteddist/bim-engine-sdk.umd.js
MediumNetwork
MediumShips Wasm Moduledist/draco/draco_decoder.wasm
MediumOversized Source Filedist/bim-engine-sdk.umd.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldistGaussian/gaussian.umd.js
LowFilesystem
Low
Affected versions and remediation
This report applies to iflow-engine-base@4.1.17.
See all versions of iflow-engine-base for other recorded verdicts.
- Review the evidence and your use of iflow-engine-base@4.1.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.