sf-i-events@1.0.1133
Superflows Navigation Component
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe active credential-forwarding path reaches a caller-configured destination without a visible allowlist. This is a dangerous capability rather than confirmed malware because no package-controlled recipient or covert trigger was established.
Static reason
One or more suspicious static signals were detected.
Trigger
Calling the event-details action after the component has been configured with apiId.
Impact
A caller that sets apiId to an unintended host could receive the active session-derived credential.
Mechanism
The action reads browser cookies, encodes them, and the request helper sends the result in an Authorization header to the supplied URL.
AI rationale
The active credential-forwarding path reaches a caller-configured destination without a visible allowlist. This is a dangerous capability rather than confirmed malware because no package-controlled recipient or covert trigger was established.
Evidence
src/sf-i-events.tssrc/util.ts
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The browser component builds a request URL from its apiId property, so the credential destination is caller-configured.
- The component reads email and accessToken cookies, encodes them, and passes the result to its request helper.
- The helper sends that value as a Basic Authorization header to the supplied URL.
- The manifest declares a browser module entrypoint and contains no install lifecycle hook.
Evidence against
- The inspected request path is part of an event-details operation and does not show a hidden package-owned recipient.
- No install-time execution, shell execution, or remote payload loader was identified in the inspected entrypoint and helper.
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcedev/templates/table-template.docxView file
•path = dev/templates/table-template.docx
kind = high_entropy_blob
sizeBytes = 5507
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dev/templates/table-template.docxView on unpkg•path = dev/templates/table-template.docx
kind = compressed_blob
sizeBytes = 5507
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
dev/templates/table-template.docxView on unpkg•path = dev/templates/table-template.docx
kind = nested_archive_needs_inspection
sizeBytes = 5507
magicHex = [redacted]
Low
Nested Archive Needs Inspection
Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
dev/templates/table-template.docxView on unpkgFindings
2 High6 Medium4 Low
HighShips High Entropy Blobdev/templates/table-template.docx
HighNode Builtin Dependency Squatpackage.json
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdev/templates/table-template.docx
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/sf-i-events.ts
MediumAi Review Evidencesrc/sf-i-events.ts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectiondev/templates/table-template.docx
Affected versions and remediation
This report applies to sf-i-events@1.0.1133.
See all versions of sf-i-events for other recorded verdicts.
- Review the evidence and your use of sf-i-events@1.0.1133 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.