@connect-xyz/withdraw-react@0.52.1
A React SDK that enables frontend React applications to seamlessly integrate with the Connect Withdraw product.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo install-time, host-level, destructive, or covert exfiltration behavior was found. The runtime remote-code loading capability remains a concrete security risk, so this should be warned rather than marked clean.
Static reason
No blocking static signals were detected.
Trigger
A React application renders the Withdraw component.
Impact
A compromise or unauthorized change at the remote SDK host could execute code in the embedding application's browser context and access the JWT attribute.
Mechanism
Dynamic remote module injection with a JWT-bearing custom element and failure telemetry.
AI rationale
No install-time, host-level, destructive, or covert exfiltration behavior was found. The runtime remote-code loading capability remains a concrete security risk, so this should be warned rather than marked clean.
Evidence
dist/index.js
Network endpoints7
sdk.sandbox.connect.xyz/withdraw-web/index.jssdk.connect.xyz/withdraw-web/index.jsgrafana-faro-collector.dev.0hash.com/collectgrafana-faro-collector.cert.zerohash.com/collectgrafana-faro-collector.zerohash.com/collectgrafana-faro-collector.cert.zerohash.eu/collectgrafana-faro-collector.zerohash.eu/collect
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The React component dynamically appends a remote module script from Connect SDK hosts when it is rendered.
- The remote custom element receives the caller-provided JWT as an attribute, so remotely supplied code can access authentication material.
- On load failures, the package posts diagnostic data including browser and page-origin metadata to Grafana collector endpoints.
- The published manifest exposes an ESM dist entry and contains no lifecycle scripts.
Evidence against
- All inspected executable code is readable JavaScript; there is no obfuscation, shell execution, filesystem access, eval, or install hook.
- Remote loading occurs only after the application renders the Withdraw component, not during package installation or import.
- The loader targets fixed vendor-aligned Connect SDK URLs and provides sandbox and production choices.
Behavioral surface
Network
UrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkg1{
"name": "@connect-xyz/withdraw-react",
"version": "0.52.1",
"private": false,
"type": "module",
"main": "./dist/index.js",
"module": "./dist/index.js",
"types": "./dist/index.d.ts",
"license": "MIT",
"exports": {
"./package.json": "./package.json",
".": {
"types": "./dist/index.d.ts",
"import": "./dist/index.js",
"default": "./dist/index.js"
}
},
"files": [
"dist",
"!**/*.tsbuildinfo"
],
Medium
Suspicious Lifecycle Evidence
The published manifest exposes an ESM dist entry and contains no lifecycle scripts.
package.jsonView on unpkg · L1dist/index.jsView file
175const l = document.createElement("script");
l.id = g, l.src = p, l.type = "module", l.async = !0, l.onload = () => {
setTimeout(() => {
f || (customElements.get(t) ? (f = !0, _(), b?.()) : S("not-defined", p, h));
}, 0);
}, l.onerror = () => S("network", p, h), x = setTimeout(() => S("timeout", p, h), u), document.getElementById(g)?.remove(), document.head.appendChild(l);
Findings
1 High5 Medium1 Low
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumAi Review Evidencedist/index.js
MediumAi Review Evidencedist/index.js
MediumAi Review Evidencedist/index.js
MediumSuspicious Lifecycle Evidencepackage.json
LowUrl Strings
Affected versions and remediation
This report applies to @connect-xyz/withdraw-react@0.52.1.
See all versions of @connect-xyz/withdraw-react for other recorded verdicts.
- Review the evidence and your use of @connect-xyz/withdraw-react@0.52.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.