registry / network-stab--helper / 1.0.1

network-stab--helper@1.0.1

POS network stability helper module

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

When a host app initializes remoteConfig, the package fetches hidden remote configuration and uses it to control random network-error injection. This can disrupt POS application requests, including targeted stores.

Static reason

One or more suspicious static signals were detected.

Trigger

A consuming application calls remoteConfig.init or forceRefresh, then uses faultInjector.shouldFail.

Impact

Remote party can enable and target denial-of-service-like network failures in consuming POS applications.

Mechanism

Obfuscated remote configuration controls probabilistic request failure injection.

AI rationale

The package contains a concrete covert remote-control path for injecting network failures into consumers. Its explicit activation requirement lowers propagation risk but does not remove the malicious runtime behavior. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.

Evidence

package.jsondist/RemoteConfig.jsdist/FaultInjector.jsdist/types.jsdist/whitelist.js

Network endpoints1

api.xintwish.com/api/fault-config

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence with false-positive risk.

network-stab--helper@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code