// npm package
@xapp/stentor-service-dialogflow
Dialogflow service for stentor
versions
1340
maintainers
5
license
Apache-2.0
first publish
2019-06-03
publisher
michaelmyers
tarball
91,494 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-06-04
// exfil path
what is read → where it shipssteals
- ● GCP creds
sends to
(no destination string extracted — payload may be dynamic / obfuscated)
evidence in excerpt
> * @see https://cloud.google.com/docs/authentication/production#finding_credentials_automatically
// publisher campaignby michaelmyers
2 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 1 other package that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @1.85.1· 1 file flagged
- @1.85.1··AUTO-PUBLISHED·publisher: michaelmyersheuristic 64/100static flags 1llm skippednew-publisher:16dmature-packagepublisher-multi-name-burst:50publisher-version-pump:51reads-gcp-creds
// offending code· 1 file flaggedpatterns: 1
--- package/lib/DialogflowV2Service.d.ts (excerpt) --- import { App, BaseService, Entity, Intent, NLUQueryResponse, NLUService } from "stentor-models"; import { FetchService } from "stentor-service-fetch"; import { Agent as DialogflowAgent, Credentials as DialogflowCredentials, EntityType as DialogflowEntityType, Intent as DialogflowIntent, gax, longrunning } from "dialogflow"; export type CredentialsRetriever = Retriever<DialogflowCredentials>; export type Credentials = DialogflowCredentials | CredentialsRetriever; export interface UpdateModelSummary { entitiesUpdated: number; entitiesDeleted: number; intentsUpdated: number; intentsDeleted: number; errors?: Error[]; } export interface DialogflowV2ServiceProps extends BaseService { /** * The project ID * * This is not the agent ID found in Dialogflow but the Google Cloud Platform project * ID associated with the Dialogflow project. It can be found under the settings page * for the agent. */ projectId: string; /** * Credentials, optional. If not provided then they will be looked for at * the environment variable GOOGLE_APPLICATION_CREDENTIALS * * @see https://cloud.google.com/docs/authentication/production#finding_credentials_automatically */ credentials?: Credentials; /** * Dialogflow beta feature use */ useBeta?: boolean; /** * Optional min confidence level for knowledge base */ knowledgeBaseConfidenceMin?: number; /** * When true and you call
