registry / @embarkai/ui-kit / 0.4.43
@embarkai/ui-kit@0.4.43
React UI components and hooks for EmbarkAI authentication and Account Abstraction
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection found a browser UI/auth SDK with aligned network services, OAuth popups, iframe messaging with origin checks, and WASM crypto glue; scanner hits are explained by normal package functionality. No install-time execution, shell execution, data harvesting, persistence, or unconsented AI-agent/control-surface mutation was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User imports package and mounts/configures the React provider or invokes auth/wallet/backup flows.
Impact
No unconsented install-time/import-time execution, credential harvesting, persistence, or destructive behavior found.
Mechanism
User-invoked browser SDK network, iframe, OAuth, and WASM crypto operations
AI rationale
Static inspection found a browser UI/auth SDK with aligned network services, OAuth popups, iframe messaging with origin checks, and WASM crypto glue; scanner hits are explained by normal package functionality. No install-time execution, shell execution, data harvesting, persistence, or unconsented AI-agent/control-surface mutation was found.
Evidence
package.jsondist/index.cjsdist/index.jsdist/iframe/main.jsdist/iframe/oauth/x.jsdist/iframe/oauth/telegram.jsdist/iframe/kyc/sumsub.jsdist/iframe/index.htmldist/iframe/_headersdist/iframe/dkls23_wasm_bg.wasm
Network endpoints12
api.embarkai.io/tssapi.embarkai.io/vaultapi.embarkai.io/on-ramp/apiauth.embarkai.iodashboard.embarkai.io/apidashboard.embarkai.io/api/public/projectapi.binance.com/api/v3/ticker/price
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/iframe/oauth/x.js posts OAuth tokens to window.opener with targetOrigin '*', but only in user-invoked OAuth popup flow.
- dist/iframe/main.js bundles WASM glue using new Function and loads dkls23_wasm_bg.wasm; this is dkls23-wasm runtime initialization, not decoded remote code execution.
Evidence against
- package.json has no install/preinstall/postinstall lifecycle hooks; main/module are dist/index.cjs and dist/index.js.
- rg found no child_process usage; only package.json clean script contains rm -rf dist for development.
- Network calls target package-aligned auth, vault, iframe, dashboard, on-ramp, Google, Telegram, Binance, Sumsub, and chain explorer APIs.
- dist/index.cjs creates auth iframe from configured https://auth.embarkai.io and validates postMessage origin before accepting iframe responses.
- Credential/keyshare code encrypts backups and uses scoped bearer tokens for EmbarkAI vault operations; no filesystem/env harvesting or exfiltration found.
- process.env access is limited to documented service URL/network configuration reads.
Behavioral surface
Source & flagged code
13 flaggeddist/iframe/main.jsView file
13__export(crypto_utils_exports, {
L14: base64ToBytes: () => base64ToBytes,
L15: bytesToBase64: () => bytesToBase64,
...
L156: return {
L157: data: bytesToBase64(new Uint8Array(encryptedData)),
L158: iv: bytesToBase64(iv),
...
L489: }
L490: const response = await fetch(`${TSS_URL}/api/auth/token/exchange`, {
L491: method: "POST",
...
L1910: }
L1911: async upload(fileName, content, usePrivateStorage = true) {
L1912: if (!this.isAuthenticated()) {
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/iframe/main.jsView on unpkg · L132710imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L2711: const ret = new Function(getStringFromWasm0(arg0, arg1));
L2712: return ret;
High
334patternName = generic_password
severity = medium
line = 334
matchedText = throw ne...)));
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/iframe/main.jsFindings
1 Critical2 High14 Medium5 Low
CriticalRemote Asset Decode Executedist/iframe/main.js
HighChild Process
HighEvaldist/iframe/main.js
MediumSecret Patterndist/iframe/main.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/dkls23_wasm_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/main.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.cjs
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.4.43.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.4.43 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.