sf-i-events@1.0.1151
Superflows Navigation Component
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe source establishes cookie-derived credential forwarding to an unrestricted caller-configured endpoint. This is a dangerous capability requiring a warning, but the inspected package does not show a hidden recipient or malicious install behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Invoking a component action such as fetching notice details after configuring its API host property.
Impact
A consumer that supplies an untrusted host can expose the user's session-derived authorization to that host.
Mechanism
The component reads email and access-token cookies, encodes them, and sends them as a Basic authorization header to a URL constructed from the configurable host.
AI rationale
The source establishes cookie-derived credential forwarding to an unrestricted caller-configured endpoint. This is a dangerous capability requiring a warning, but the inspected package does not show a hidden recipient or malicious install behavior.
Evidence
src/util.tssrc/sf-i-events.ts
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The component accepts an API host through a public property without destination validation.
- A component action builds an HTTPS request to that configurable host and encodes existing email and access-token cookies as authorization.
- The request helper places that authorization in a request header and sends the request.
Evidence against
- package.json has no npm lifecycle hook.
- No child-process, dynamic-code, or import-time attack behavior was found in the inspected entrypoint paths.
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcedev/templates/table-template.docxView file
•path = dev/templates/table-template.docx
kind = high_entropy_blob
sizeBytes = 5507
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dev/templates/table-template.docxView on unpkg•path = dev/templates/table-template.docx
kind = compressed_blob
sizeBytes = 5507
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
dev/templates/table-template.docxView on unpkg•path = dev/templates/table-template.docx
kind = nested_archive_needs_inspection
sizeBytes = 5507
magicHex = [redacted]
Low
Nested Archive Needs Inspection
Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
dev/templates/table-template.docxView on unpkgFindings
2 High6 Medium4 Low
HighShips High Entropy Blobdev/templates/table-template.docx
HighNode Builtin Dependency Squatpackage.json
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdev/templates/table-template.docx
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/sf-i-events.ts
MediumStripped Provenance Metadatasrc/sf-i-events.ts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectiondev/templates/table-template.docx
Affected versions and remediation
This report applies to sf-i-events@1.0.1151.
See all versions of sf-i-events for other recorded verdicts.
- Review the evidence and your use of sf-i-events@1.0.1151 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.