registry / zj-plugin-intelligent / 1.2.20

zj-plugin-intelligent@1.2.20

⚠ Under review

> 智能客服 / 智能体客户端 Vue 2 插件库。 > 通过 npm 包（`zj-plugin-intelligent`）方式发布，宿主项目引入后挂载全局组件 `ZjkjIntelligent`，提供 AI 会话、TokUI 动态表单、文件上传、语音交互等能力。

AI Security Review

scanned 10d ago · by lpm-firewall-ai

No confirmed attack was found in the inspected JavaScript entry bundles. Opaque archive artifacts prevent ruling out an embedded payload.

Static reason

No blocking static signals were detected.

Trigger

Normal library import for the visible bundle; any use of the unassessed archive contents is unknown.

Impact

No malicious effect is confirmed, but the unreadable artifacts leave residual uncertainty.

Mechanism

The visible chat feature forwards its token to a fixed service endpoint; the binary artifacts could not be statically inspected.

AI rationale

The active metadata has no install lifecycle hook and the visible bundles show a fixed-endpoint chat client, not a confirmed attack. Required binary artifacts were unreadable, so a clean verdict cannot be supported by complete source inspection.

Evidence

lib/lib.ziplib/.gzpackage.jsonlib/ZjPluginIntelligent.umd.min.jslib/ZjPluginIntelligent.common.js

Network endpoints1

ai-api.qiguanbang.com

Decision evidence

public snapshot

AI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.

AI review observations

Package metadata selects a browser bundle as the main entrypoint and defines no npm lifecycle hook.
The visible bundles build a chat request that may include a browser token and use a fixed HTTPS AI-service endpoint.
Two required binary artifacts could not be read through the source inspection interface, leaving their contents unassessed.

Evidence against

Behavioral surface

Source

CryptoEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 11.5 MB of source, external domains: acs.amazonaws.com, ai-api.qiguanbang.com, answers.microsoft.com, api.jingyingbang.net, api.jybtech.cn, api.qgbtech.cn, cdn.static.jingyingbang.com, dev.jybtech.cn, docs.oasis-open.org, gateway.jingyingbang.com, github.com, goo.gl, marked.js.org, openoffice.org, purl.oclc.org, purl.org, qgb-form.qgbtech.cn, qgb-form.qiguanbang.com, qgb-formqgb.jingyingbang.net, qgb.jingyingbang.net, qgbwl.com, qiguanbang-client.obs.cn-east-3.myhuaweicloud.com, qiguanbang.com, qiguanbang.obs.cn-east-3.myhuaweicloud.com, qiguanbang.qgbtech.cn, rolldown.rs, schemas.microsoft.com, schemas.openxmlformats.org, schemas.zwobble.org, shangpin.jingyingbang.com, shangpin.jingyingbang.net, sheetjs.openxmlformats.org, stuk.github.io, user.jingyingbang.com, user.jingyingbang.net, user.jybtech.cn, webapi.amap.com, www.w3.org

Source & flagged code

7 flagged

lib/ZjPluginIntelligent.common.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/ZjPluginIntelligent.common.jsView on unpkg

33*/ L34: function(e){if(Number(e.version.split(".")[0])>=2)e.mixin({beforeCreate:r});else{var t=e.prototype._init;e.prototype._init=function(e){void 0===e&&(e={}),e.init=e.init?[r].concat(e... L35: /*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> */function ge(){return fe||(fe=1,function(e){var t=function(){if(ue)return pe;ue=1,pe.byteLen...

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/ZjPluginIntelligent.common.jsView on unpkg · L33

lib/lib.zipView file

•path = lib/lib.zip kind = high_entropy_blob sizeBytes = 6609745 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/lib.zipView on unpkg

•path = lib/lib.zip kind = compressed_blob sizeBytes = 6609745 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

lib/lib.zipView on unpkg

•path = lib/lib.zip kind = nested_archive_needs_inspection sizeBytes = 6609745 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

lib/lib.zipView on unpkg

lib/.gzView file

•path = lib/.gz kind = payload_in_excluded_dir sizeBytes = 1094874 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

lib/.gzView on unpkg

lib/ZjPluginIntelligent.umd.min.jsView file

•path = lib/ZjPluginIntelligent.umd.min.js kind = trigger_reachable_excluded_payload sizeBytes = 4013372 triggerReachableSource = lib/ZjPluginIntelligent.umd.min.js excludedPayload = lib/.gz

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

lib/ZjPluginIntelligent.umd.min.jsView on unpkg

Source & flagged code

7 flagged · loading source

lib/ZjPluginIntelligent.common.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/ZjPluginIntelligent.common.jsView on unpkg

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/ZjPluginIntelligent.common.jsView on unpkg · L33

lib/lib.zipView file

•path = lib/lib.zip kind = high_entropy_blob sizeBytes = 6609745 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/lib.zipView on unpkg

•path = lib/lib.zip kind = compressed_blob sizeBytes = 6609745 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

lib/lib.zipView on unpkg

•path = lib/lib.zip kind = nested_archive_needs_inspection sizeBytes = 6609745 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

lib/lib.zipView on unpkg

lib/.gzView file

•path = lib/.gz kind = payload_in_excluded_dir sizeBytes = 1094874 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

lib/.gzView on unpkg

lib/ZjPluginIntelligent.umd.min.jsView file

•path = lib/ZjPluginIntelligent.umd.min.js kind = trigger_reachable_excluded_payload sizeBytes = 4013372 triggerReachableSource = lib/ZjPluginIntelligent.umd.min.js excludedPayload = lib/.gz

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

lib/ZjPluginIntelligent.umd.min.jsView on unpkg

Findings

1 Critical3 High3 Medium6 Low

CriticalTrigger Reachable Excluded Directory Payloadlib/ZjPluginIntelligent.umd.min.js

HighShips High Entropy Bloblib/lib.zip

HighPayload In Excluded Dirlib/.gz

HighSemantic Analysis Limitedlib/ZjPluginIntelligent.common.js

MediumNetwork

MediumShips Compressed Bloblib/lib.zip

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvallib/ZjPluginIntelligent.common.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectionlib/lib.zip

Affected versions and remediation

This report applies to zj-plugin-intelligent@1.2.20.

See version security history for other recorded verdicts.

Review the evidence and your use of zj-plugin-intelligent@1.2.20 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-28 04:40:22.432Z (UTC).