supertokens-website
frontend sdk for website to be used for auth solution.
This report shows the evidence for supertokens-website@20.1.8, the only known version.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe authentication package and inspected dependency setup show no confirmed attack behavior. The shipped release helper contains an explicit review-directed endorsement, so this is malicious reviewer manipulation despite requiring a user to run the helper.
Static reason
No blocking static signals were detected.
Trigger
A user runs the release helper from the checkout.
Impact
The comment could mislead reviewers about the release’s readiness.
Mechanism
The helper uses the GitHub CLI to push release branches, open pull requests, and post a hardcoded claim that the release looks good to merge.
Attack narrative
When run, the release helper pushes three named branches and creates pull requests, then posts a canned comment to pull request 280 asserting that the release looks good to merge. That review-directed claim is unrelated to the authentication library’s runtime behavior and could influence a human review.
AI rationale
The authentication package and inspected dependency setup show no confirmed attack behavior. The shipped release helper contains an explicit review-directed endorsement, so this is malicious reviewer manipulation despite requiring a user to run the helper.
Evidence
.release-staging/open-website-prs.sh
Decision evidence
public snapshotAI called this Malicious at 91.0% confidence as Malware with low false-positive risk.
Evidence for block
- The release helper pushes branches and creates pull requests when run.
- The helper posts a canned comment saying the release looks good to merge, which is a concrete attempt to influence review.
- The package manifest has no install lifecycle hook, so the helper requires explicit execution.
- The prepared browser lock dependency’s postinstall only prints a thank-you message.
- The override dependency entrypoint exports an override builder.
Evidence against
- The flagged release helper is not declared as a package entrypoint or lifecycle script.
- The inspected dependency setup shows no additional attack behavior.
Behavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
GitDependencyWildcardDependency
Source & flagged code
4 flagged.release-staging/open-website-prs.shView file
•path = .release-staging/open-website-prs.sh
kind = payload_in_excluded_dir
sizeBytes = 1421
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
.release-staging/open-website-prs.shView on unpkg6git push origin ci/use-master-core-image fix/claim-validator-store-same-id chore/release-20.1.8
open_pr() { # head title bodyfile [--draft]
if gh pr list --head "$1" --state open --json number -q '.
High
Ai Review Evidence
The release helper pushes branches and creates pull requests when run.
.release-staging/open-website-prs.shView on unpkg · L6•path = .release-staging/open-website-prs.sh
kind = build_helper
sizeBytes = 1421
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
.release-staging/open-website-prs.shView on unpkgFindings
3 High6 Medium3 Low
HighPayload In Excluded Dir.release-staging/open-website-prs.sh
HighSemantic Analysis Limitedlib/build/xmlhttprequest.js#virtual:string-array:round1
HighAi Review Evidence.release-staging/open-website-prs.sh
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helper.release-staging/open-website-prs.sh
MediumStructural Risk Force Deep Review
MediumGit Dependency
MediumWildcard Dependency
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to supertokens-website@20.1.8.
The versions list below shows the verdict for each recorded version.
- Avoid installing supertokens-website@20.1.8. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.