storysplat-viewer@2.12.5
PlayCanvas-based 3D viewer for StorySplat scenes - HTML export & dynamic embedding
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe source confirms scene-provided custom scripts execute in the viewer runtime, leaving a meaningful code execution risk for loaded scenes. The manifest shows only a prepublishOnly build hook, and the inspected evidence does not support blocking the package as malicious.
Static reason
One or more suspicious static signals were detected.
Trigger
Loading a scene with a nonempty customScript field initializes and runs the script.
Impact
The script can act with the capabilities available to the embedding page; the inspected source does not establish that this capability is used for malicious behavior.
Mechanism
The runtime constructs the script with Function and invokes it in the viewer's JavaScript realm.
AI rationale
The source confirms scene-provided custom scripts execute in the viewer runtime, leaving a meaningful code execution risk for loaded scenes. The manifest shows only a prepublishOnly build hook, and the inspected evidence does not support blocking the package as malicious.
Evidence
dist/index.js
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest points Node and browser consumers to the inspected distribution entrypoints.
- Scene configuration carries a customScript field into the viewer runtime.
- The viewer initializes and executes a nonempty custom script, creating it with JavaScript's Function constructor.
- The manifest's prepublishOnly hook runs the package build.
Evidence against
- The manifest hook is a build step, not an install hook; the inspected code does not establish credential theft or package-controlled data exfiltration.
Behavioral surface
DynamicRequireEnvironmentVarsEvalNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
1"use strict";var e=require("playcanvas");function t(e){var t=Object.create(null);return e&&Object.keys(e).forEach(function(n){if("default"!==n){var o=Object.getOwnPropertyDescripto...
L2: /**
...
L10: * https://github.com/google/material-design-icons/blob/master/LICENSE
L11: */(c);e.querySelectorAll(".storysplat-tour-look-hint-callout--wheel").forEach((e,t)=>{e.textContent=h[t]??""}),p(".storysplat-tour-look-hint-narrow-text--drag",l),p(".storysplat-to...
L12: //# sourceMappingURL=index.js.map
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L11"use strict";var e=require("playcanvas");function t(e){var t=Object.create(null);return e&&Object.keys(e).forEach(function(n){if("default"!==n){var o=Object.getOwnPropertyDescripto...
L2: /**
...
L10: * https://github.com/google/material-design-icons/blob/master/LICENSE
L11: */(c);e.querySelectorAll(".storysplat-tour-look-hint-callout--wheel").forEach((e,t)=>{e.textContent=h[t]??""}),p(".storysplat-tour-look-hint-narrow-text--drag",l),p(".storysplat-to...
L12: //# sourceMappingURL=index.js.map
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L1Findings
3 High5 Medium6 Low
HighSame File Env Network Executiondist/index.js
HighBase64 Obscured Urldist/index.js
HighSemantic Analysis Limiteddist/index.esm.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/storysplat-viewer.bundled.umd.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/index.js
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to storysplat-viewer@2.12.5.
See all versions of storysplat-viewer for other recorded verdicts.
- Review the evidence and your use of storysplat-viewer@2.12.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.