registry / @clerk/clerk-js / 6.23.0
@clerk/clerk-js@6.23.0
Clerk JS library
AI Security Review
scanned 4mo ago · by lpm-firewall-aiDirect source inspection found a normal published Clerk browser authentication bundle with no lifecycle hooks, no install-time execution, and no evidence of credential harvesting, persistence, destructive behavior, or AI-agent control-surface mutation. The suspicious scanner signals are attributable to minified bundled artifacts, expected browser network APIs, third-party wallet/payment/captcha integrations, and bundled password-strength data.
Static reason
One or more suspicious static signals were detected.
Trigger
Application imports or loads ClerkJS at runtime
Impact
Expected user authentication/session management; no install-time or hidden persistence behavior found
Mechanism
browser auth SDK API calls, cookies/localStorage, captcha, telemetry, and wallet/payment integrations
AI rationale
Direct source inspection found a normal published Clerk browser authentication bundle with no lifecycle hooks, no install-time execution, and no evidence of credential harvesting, persistence, destructive behavior, or AI-agent control-surface mutation. The suspicious scanner signals are attributable to minified bundled artifacts, expected browser network APIs, third-party wallet/payment/captcha integrations, and bundled password-strength data.
Evidence
package.jsonno-rhc/index.jsdist/clerk.jsdist/clerk.mjsdist/clerk.native.jsdist/clerk.browser.jsdist/clerk.no-rhc.jsREADME.md
Network endpoints9
clerk-telemetry.comchallenges.cloudflare.com/turnstile/v0/api.js?render=explicitdashboard.clerk.comjs.stripe.com/v3api.developer.coinbase.com/rpc/v1/base/S-fOd2n2Oi4fl4e1Crm83XeDXZ7tkg8Oapi.developer.coinbase.com/rpc/v1/base-sepolia/S-fOd2n2Oi4fl4e1Crm83XeDXZ7tkg8Orpc.wallet.coinbase.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has no preinstall/install/postinstall lifecycle hooks; published entries are dist/clerk.js, dist/clerk.mjs, dist/clerk.native.js, and no-rhc wrappers.
- no-rhc/index.js only requires ../dist/clerk.no-rhc; no package-time execution beyond normal import.
- Bundled/minified dist files implement Clerk auth SDK runtime behavior, resource fetching, cookies/localStorage/session state, captcha, Stripe, and wallet integrations.
- Network URLs are package-aligned Clerk/telemetry/captcha/payment/wallet endpoints, not arbitrary exfiltration hosts.
- No AI-agent control-surface writes or lifecycle mutation strings found for .mcp, CLAUDE, Cursor, .claude, Codex, OPENAI, or ANTHROPIC.
- Static obfuscation signal is explained by large production bundles and bundled third-party dependencies including zxcvbn password lists and wallet SDK code.
Behavioral surface
ChildProcessCryptoNetwork
HighEntropyStrings
Source & flagged code
1 flaggeddist/clerk.native.jsView file
17package = @clerk/clerk-js; repositoryIdentity = javascript; dependency = @zxcvbn-ts/core
L17: For more information contact us at ${t}`)}function it(e){throw Error(`${t2} Calling ${e}.reload is not currently supported. Please contact support.`)}function ii(e){throw Error(`${...
L18: API Error: ${n}`,{data:t,status:e})}}(s,e);let r={data:e,status:s};if(429===s&&o){let e=o.get("retry-after");if(e){let t=parseInt(e,10);isNaN(t)||(r.retryAfter=t)}}throw new F(t||a...
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/clerk.native.jsView on unpkg · L17Findings
2 High3 Medium3 Low
HighCopied Package Dependency Bridgedist/clerk.native.js
HighObfuscated
MediumNetwork
MediumProtestware
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @clerk/clerk-js@6.23.0.
See all versions of @clerk/clerk-js for other recorded verdicts.
- Review the evidence and your use of @clerk/clerk-js@6.23.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.