registry / @embarkai/ui-kit / 0.4.107
@embarkai/ui-kit@0.4.107
⚠ Under reviewReact UI components and hooks for EmbarkAI authentication and Account Abstraction
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 19 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
EnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
11 flaggeddist/iframe/main.jsView file
336patternName = generic_password
severity = medium
line = 336
Medium
554patternName = generic_password
severity = medium
line = 554
Medium
4507imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L4508: const ret = new Function(getStringFromWasm0(arg0, arg1));
L4509: return ret;
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/iframe/main.jsView on unpkg · L4507dist/iframe/dkls23_wasm_bg.wasmView file
Findings
1 High12 Medium6 Low
HighSemantic Analysis Limiteddist/styles.css
MediumSecret Patterndist/iframe/main.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/dkls23_wasm_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/main.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.cjs
MediumSecret Patterndist/index.cjs
MediumSecret Patterndist/index.cjs
LowScripts Present
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.4.107.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.4.107 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.