registry / zj-plugin-intelligent / 1.2.11

zj-plugin-intelligent@1.2.11

> 智能客服 / 智能体客户端 Vue 2 插件库。 > 通过 npm 包（`zj-plugin-intelligent`）方式发布，宿主项目引入后挂载全局组件 `ZjkjIntelligent`，提供 AI 会话、TokUI 动态表单、文件上传、语音交互等能力。

AI Security Review

scanned 19d ago · by lpm-firewall-ai

The interactive chat component loads and executes a remotely hosted JavaScript file. No install-time attack surface was found.

Static reason

No blocking static signals were detected.

Trigger

A host application opens the plugin chat after its parameters validate.

Impact

The CDN operator can change code executed in the host application's browser session.

Mechanism

Runtime remote script injection into the host document.

AI rationale

The package has no lifecycle-based install attack, and its compressed hidden file is a duplicate of shipped source. Its user-triggered remote script loader nevertheless permits CDN-controlled code to execute in a consuming application's page.

Evidence

lib/ZjPluginIntelligent.umd.min.js

Network endpoints1

cdn.static.jingyingbang.com

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package entrypoint is a browser UMD bundle and the manifest has no install lifecycle hook.
The bundle creates a script element and appends it to the document.
Opening the plugin chat calls setUserParams, which loads a script from a remote CDN URL.
The hidden gzip file decompresses exactly to the shipped common JavaScript bundle; it is not a separate executable payload.

Evidence against

No install-time execution, shell command, package self-dependency, or filesystem mutation was found.
The remote loader appears in the plugin's interactive chat initialization path, not during installation or import.

Behavioral surface

Source

CryptoEvalNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 6.95 MB of source, external domains: acs.amazonaws.com, ai-api.qiguanbang.com, api.jingyingbang.net, api.jybtech.cn, api.qgbtech.cn, cdn.static.jingyingbang.com, dev.jybtech.cn, gateway.jingyingbang.com, github.com, qgb-form.qgbtech.cn, qgb-form.qiguanbang.com, qgb-formqgb.jingyingbang.net, qgb.jingyingbang.net, qgbwl.com, qiguanbang.com, qiguanbang.obs.cn-east-3.myhuaweicloud.com, qiguanbang.qgbtech.cn, rolldown.rs, shangpin.jingyingbang.com, shangpin.jingyingbang.net, user.jingyingbang.com, user.jingyingbang.net, user.jybtech.cn, webapi.amap.com, www.w3.org

Source & flagged code

7 flagged

lib/ZjPluginIntelligent.common.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/ZjPluginIntelligent.common.jsView on unpkg

30*/ L31: function(t){if(Number(t.version.split(".")[0])>=2)t.mixin({beforeCreate:r});else{var e=t.prototype._init;t.prototype._init=function(t){void 0===t&&(t={}),t.init=t.init?[r].concat(t... L32: /*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> */

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/ZjPluginIntelligent.common.jsView on unpkg · L30

lib/.gzView file

•path = lib/.gz kind = high_entropy_blob sizeBytes = 653917 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/.gzView on unpkg

•path = lib/.gz kind = payload_in_excluded_dir sizeBytes = 653917 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

lib/.gzView on unpkg

•path = lib/.gz kind = compressed_blob sizeBytes = 653917 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

lib/.gzView on unpkg

lib/ZjPluginIntelligent.umd.min.jsView file

•path = lib/ZjPluginIntelligent.umd.min.js kind = trigger_reachable_excluded_payload sizeBytes = 2430756 triggerReachableSource = lib/ZjPluginIntelligent.umd.min.js excludedPayload = lib/.gz

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

lib/ZjPluginIntelligent.umd.min.jsView on unpkg

package.jsonView file

Lines 1-24json

2 "name": "zj-plugin-intelligent",

3 "version": "1.2.11",

4 "main": "lib/ZjPluginIntelligent.umd.min.js",

5 "private": false,

Source & flagged code

7 flagged · loading source

lib/ZjPluginIntelligent.common.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/ZjPluginIntelligent.common.jsView on unpkg

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/ZjPluginIntelligent.common.jsView on unpkg · L30

lib/.gzView file

•path = lib/.gz kind = high_entropy_blob sizeBytes = 653917 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/.gzView on unpkg

•path = lib/.gz kind = payload_in_excluded_dir sizeBytes = 653917 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

lib/.gzView on unpkg

•path = lib/.gz kind = compressed_blob sizeBytes = 653917 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

lib/.gzView on unpkg

lib/ZjPluginIntelligent.umd.min.jsView file

•path = lib/ZjPluginIntelligent.umd.min.js kind = trigger_reachable_excluded_payload sizeBytes = 2430756 triggerReachableSource = lib/ZjPluginIntelligent.umd.min.js excludedPayload = lib/.gz

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

lib/ZjPluginIntelligent.umd.min.jsView on unpkg

package.jsonView file

4"main": "lib/ZjPluginIntelligent.umd.min.js", "private": false, "scripts": {

Medium

Suspicious Lifecycle Evidence

The package entrypoint is a browser UMD bundle and the manifest has no install lifecycle hook.

package.jsonView on unpkg · L4

Findings

1 Critical3 High4 Medium4 Low

CriticalTrigger Reachable Excluded Directory Payloadlib/ZjPluginIntelligent.umd.min.js

HighShips High Entropy Bloblib/.gz

HighPayload In Excluded Dirlib/.gz

HighSemantic Analysis Limitedlib/ZjPluginIntelligent.common.js

MediumNetwork

MediumShips Compressed Bloblib/.gz

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

LowScripts Present

LowEvallib/ZjPluginIntelligent.common.js

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to zj-plugin-intelligent@1.2.11.

See version security history for other recorded verdicts.

Review the evidence and your use of zj-plugin-intelligent@1.2.11 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 14:03:01.316Z (UTC).