@dynamic-labs-sdk/metamask@1.49.0
Chain-agnostic primitives for integrating the [MetaMask SDK](https://docs.metamask.io/sdk/) (`@metamask/connect-multichain` and its chain-specific facades such as `@metamask/connect-evm`) with the Dynamic JS SDK.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s MetaMask client dependency enables runtime analytics by default, and the wrapper does not configure an opt-out. The observed events carry usage metadata such as app identity and requested chains, so this is undisclosed runtime telemetry rather than credential exfiltration.
Static reason
No blocking static signals were detected.
Trigger
The host app invokes the MetaMask connection helper and starts pairing.
Impact
Usage metadata is sent through MetaMask analytics. No credential or machine-detail collection was identified in the reviewed paths.
Mechanism
The wrapper creates the multichain client without an analytics option; its dependency defaults analytics to enabled and tracks connection events with dapp, anonymous ID, platform, version, and chain properties.
AI rationale
The package’s MetaMask client dependency enables runtime analytics by default, and the wrapper does not configure an opt-out. The observed events carry usage metadata such as app identity and requested chains, so this is undisclosed runtime telemetry rather than credential exfiltration.
Evidence
dist/getOrCreateMetaMaskClientInstanceManager-DPH8CjB3.cjsdist/index.cjs.lpm-dependency-evidence-b88a5a0d-a6bd-4838-b939-3e2e056e91a8/1/npm-linux/dist/src/multichain/index.js
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package creates the MetaMask multichain client without setting an analytics option.
- The dependency defaults analytics to enabled when no setting is provided.
- On connection, the dependency tracks configured and requested chains and attaches dapp ID, anonymous ID, platform, and version properties.
- The wrapper starts pairing by calling connect when its connection helper is used, so this telemetry is triggered at runtime rather than on import or install.
Evidence against
- The manifest contains no install lifecycle script.
- The reviewed package code does not collect credentials or machine details.
Behavioral surface
NoLicense
Source & flagged code
5 flaggeddist/getOrCreateMetaMaskClientInstanceManager-DPH8CjB3.cjsView file
579_multichain.createMultichainClient)({
api: { supportedNetworks },
dapp: {
iconUrl: appLogoUrl,
name: appName,
nativeScheme,
url: appUniversalLink ?? ""
},
debug,
Medium
Ai Review Evidence
The package creates the MetaMask multichain client without setting an analytics option.
dist/getOrCreateMetaMaskClientInstanceManager-DPH8CjB3.cjsView on unpkg · L579.lpm-dependency-evidence-b88a5a0d-a6bd-4838-b939-3e2e056e91a8/1/npm-linux/dist/src/multichain/index.jsView file
51function normalizeAnalyticsOptions(analyticsOptions) {
var _a;
return Object.assign(Object.assign({}, (analyticsOptions !== null && analyticsOptions !== void 0 ? analyticsOptions : {})), { enabled: (_a = analyticsOptions === null || analyticsOptions ==
Medium
Findings
5 Medium2 Low
MediumAi Review Evidencedist/getOrCreateMetaMaskClientInstanceManager-DPH8CjB3.cjs
MediumSuspicious Dependency Evidence.lpm-dependency-evidence-b88a5a0d-a6bd-4838-b939-3e2e056e91a8/1/npm-linux/dist/src/multichain/index.js
MediumSuspicious Dependency Evidence.lpm-dependency-evidence-b88a5a0d-a6bd-4838-b939-3e2e056e91a8/1/npm-linux/dist/src/multichain/index.js
MediumSuspicious Dependency Evidence.lpm-dependency-evidence-b88a5a0d-a6bd-4838-b939-3e2e056e91a8/1/npm-linux/dist/src/multichain/index.js
MediumAi Review Evidencedist/index.cjs
LowScripts Present
LowNo License
Affected versions and remediation
This report applies to @dynamic-labs-sdk/metamask@1.49.0.
See all versions of @dynamic-labs-sdk/metamask for other recorded verdicts.
- Review the evidence and your use of @dynamic-labs-sdk/metamask@1.49.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.