registry / Credential exfiltration / nitxui
nitxui
The official UI component library for Nitx projects.
This report shows the evidence for nitxui@2.3.5. 1 of 13 known versions is blocked or flagged. See all versions.
AI Security Review
scanned 10h ago · by lpm-firewall-aiThe published runtime entrypoint contains an active credential-forwarding path to a package-selected endpoint, triggered by a user changing language. This supports blocking publication as credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A consumer renders the account preferences component and the user changes the language.
Impact
A credential belonging to the consuming application may be disclosed to the package-selected Nitx endpoint.
Mechanism
The change invokes an account update request that selects a token from available client state, cookies, or storage and sends it in an Authorization header.
Attack narrative
When a user changes the account language, the package sends an account update request. If no API client or URL override handles the request, the code searches common cookie and storage locations for a token and attaches it to the request. On non-Nitx hosts, the default recipient is api.dev.nitx.app, creating a path for credentials from the consuming application to be disclosed to that endpoint.
AI rationale
The published runtime entrypoint contains an active credential-forwarding path to a package-selected endpoint, triggered by a user changing language. This supports blocking publication as credential exfiltration.
Evidence
package.jsondist/index.mjs
Network endpoints1
api.dev.nitx.app
Decision evidence
public snapshotAI called this Malicious at 95.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest exposes dist/index.mjs as the package entrypoint.
- The entrypoint searches common session and token cookie names for credentials.
- The request can take a token from cookies or browser storage, add it as an Authorization header, and send it with a POST.
- On hosts outside Nitx domains, the default recipient is api.dev.nitx.app.
- Changing the account language calls the request helper without requiring recipient-specific consent.
Evidence against
Behavioral surface
CryptoEnvironmentVarsNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flagged · loading sourcedist/index.mjsView file
•Browser cookie sent to a fixed external endpoint in dist/index.mjs:
urlPlaceholder: "https://example.com",
urlPlaceholder: "https://example.com",
urlPlaceholder: "https://example.com",
urlPlaceholder: "https://example.com",
var profileIcon = "https://ui-avatars.com/api/?name=SALT&background=000&color=fff&rounded=true";
image: "https://cdn-new.nitx.app/nitx-assets/ProductLight/signage-icon.svg",
dark_image: "https://cdn-new.nitx.app/nitx-assets/productsIconDark/signage-dark.svg",
image: "https://cdn-new.nitx.app/nitx-assets/ProductLight/publisher-logo.svg",
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.mjsView on unpkg181patternName = generic_password
severity = medium
line = 181
Medium
186patternName = generic_password
severity = medium
line = 186
Medium
Findings
1 Critical1 High9 Medium3 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.mjs
HighSemantic Analysis Limiteddist/styles.css
MediumSecret Patterndist/index.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/index.mjs
MediumSecret Patterndist/index.mjs
MediumSecret Patterndist/index.mjs
MediumSecret Patterndist/index.mjs
MediumSecret Patterndist/index.mjs
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to nitxui@2.3.5.
The versions list below shows the verdict for each recorded version.
- Avoid installing nitxui@2.3.5. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.