q-koa@13.8.69
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe source exposes request-supplied JavaScript evaluation through the model read API, creating a server-side code execution risk whose effective access controls depend on configuration. I found no install lifecycle behavior or separate malicious payload chain, so this warrants a warning rather than a publish block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A caller invokes a model read operation with include in the request body.
Impact
A caller who can reach this path may run JavaScript with the server process's privileges.
Mechanism
The framework wraps include in eval and executes the resulting function against the application object; authentication and exclusion behavior depends on request and app configuration.
AI rationale
The source exposes request-supplied JavaScript evaluation through the model read API, creating a server-side code execution risk whose effective access controls depend on configuration. I found no install lifecycle behavior or separate malicious payload chain, so this warrants a warning rather than a publish block.
Evidence
core/app.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest points to index.js and declares no install or import lifecycle hook.
- A model read request takes include from the request body, and the framework wraps it in eval and invokes the resulting function on the application object.
- The model read path has a configuration-dependent exclusion check, while the middleware permits some requests without token verification.
- The startup subscriber listens for cache clear and only clears the selected cache entry.
Evidence against
- The inspected startup subscription performs a routine cache clear; no account-changing behavior was found there.
- The flagged service integrations use their corresponding official service endpoints.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
17 flagged · loading sourcecore/file/plugins/common/controller.jsView file
•matchType = normalized_sha256
matchedPackage = q-koa@13.8.67
matchedPath = [redacted].js
matchedIdentity = npm:cS1rb2E:13.8.67
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
core/file/plugins/common/controller.jsView on unpkg184patternName = generic_password
severity = medium
line = 184
Medium
Secret Pattern
Package contains a possible secret pattern.
core/file/plugins/common/controller.jsView on unpkg · L18415const OSS = require('ali-oss')
L16: const axios = require('axios')
L17: const util = require('util')
...
L58:
L59: const imgData = Buffer.from(reader).toString('base64')
L60: // 转换为 data:image/jpeg;base64,***** 格式的字符串
L61: const base64 = `data:${file.name.split('.')[1]};base64,${imgData}`
...
L64: const targetPath = `${path.resolve(
L65: __dirname,
L66: `${process.cwd()}/public/upload`
Low
Weak Crypto
Package source references weak cryptographic algorithms.
Findings
1 Critical10 High8 Medium5 Low
CriticalRemote Response Code Executioncore/file/plugins/system/service.js
HighEvalcore/file/plugins/system/service.js
HighKnown Malware Source Similaritycore/app.js
HighKnown Malware Source Similaritycore/file/plugins/alipay/controller.js
HighKnown Malware Source Similaritycore/file/plugins/common/controller.js
HighKnown Malware Source Similaritycore/file/plugins/model/controller.js
HighKnown Malware Source Similaritycore/file/plugins/setting/afterExecute.js
HighKnown Malware Source Similaritycore/file/plugins/system/controller.js
HighKnown Malware Source Similaritycore/file/services/toutiao.js
HighKnown Malware Source Similaritycore/file/services/weixinMP.js
Affected versions and remediation
This report applies to q-koa@13.8.69.
See all versions of q-koa for other recorded verdicts.
- Review the evidence and your use of q-koa@13.8.69 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.