registry / @carbon/ai-chat-components / 1.9.0
@carbon/ai-chat-components@1.9.0
AI Chat Components
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe postinstall telemetry signal is explicit, package-aligned, and configured through a local allowlist. Source inspection found no concrete malicious chain, exfiltration primitive, payload execution, or persistence.
Static reason
One or more suspicious static signals were detected.
Trigger
npm install executes postinstall.
Impact
May send configured de-identified telemetry to IBM; source shows no credential, file, or agent-control access.
Mechanism
package-aligned telemetry configuration
AI rationale
The postinstall telemetry signal is explicit, package-aligned, and configured through a local allowlist. Source inspection found no concrete malicious chain, exfiltration primitive, payload execution, or persistence.
Evidence
package.jsontelemetry.ymles-custom/components/code-snippet/src/codemirror/detect-language.jses/react/utils/withWebComponentBridge.js
Network endpoints1
www-api.ibm.com/ibm-telemetry/v1/metrics
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Install invokes IBM telemetry with a package-local configuration.
- Telemetry configuration declares an IBM metrics endpoint and allowlisted component attributes.
Evidence against
- No package source uses child-process, filesystem, eval, or credential-harvesting primitives.
- The scanner's purported dynamic require is a regex matching displayed code snippets, not runtime require.
- Dynamic imports are fixed local/component dependencies for CodeMirror language loading.
- Environment-variable reads only detect test/DOM-shim conditions.
- No AI-agent configuration, persistence, destructive action, or hidden payload loader was found.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVars
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.postinstall = ibmtelemetry --config=telemetry.yml
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = ibmtelemetry --config=telemetry.yml
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg32"scripts": {
"build": "npm run clean && node tasks/build.js && node tasks/build-dist.js && npm run custom-elements",
"clean": "rimraf es es-custom dist storybook-static",
"custom-elements": "cem analyze --config ./custom-elements-manifest.config.js",
"postinstall": "ibmtelemetry --config=telemetry.yml",
"start": "concurrently --names storybook,storybook-react,build --prefix-colors cyan,magenta,yellow --restart-tries Infinity --restart-after 2000 \"npm run storybook\" \"npm run storybook:react\" \"node tasks/build.js --watch\"",
Low
Ai Review Evidence
Install invokes IBM telemetry with a package-local configuration.
package.jsonFindings
1 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirees-custom/components/code-snippet/src/codemirror/detect-language.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencetelemetry.yml
Affected versions and remediation
This report applies to @carbon/ai-chat-components@1.9.0.
See all versions of @carbon/ai-chat-components for other recorded verdicts.
- Review the evidence and your use of @carbon/ai-chat-components@1.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.