registry / @embarkai/ui-kit / 0.4.84
@embarkai/ui-kit@0.4.84
React UI components and hooks for EmbarkAI authentication and Account Abstraction
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe scanner's execution chain is a false positive: the flagged Function is wasm-bindgen glue and its WASM fetch is a relative packaged asset. Source inspection found no lifecycle execution or concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Application runtime actions such as wallet backup, OAuth, or KYC
Impact
No unconsented code execution, host mutation, or credential exfiltration established
Mechanism
local WASM crypto and package-aligned API calls
AI rationale
The scanner's execution chain is a false positive: the flagged Function is wasm-bindgen glue and its WASM fetch is a relative packaged asset. Source inspection found no lifecycle execution or concrete malicious behavior.
Evidence
package.jsondist/iframe/main.jsdist/iframe/index.htmldist/iframe/_headersdist/iframe/oauth/telegram.jsdist/iframe/kyc/sumsub.jsdist/index.cjsdist/iframe/oauth/x.jsdist/iframe/dkls23_wasm_bg.wasm
Network endpoints5
api.embarkai.io/vaultapi.embarkai.io/tssapis.google.com/js/api.jsaccounts.google.com/gsi/clientstatic.sumsub.com/idensic/static/sns-websdk-builder.js
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Bundled iframe loads local dkls23 WebAssembly, whose generated glue includes new Function.
- Iframe supports explicit wallet backup and OAuth/KYC integrations with network access.
Evidence against
- package.json has no preinstall/install/postinstall hooks or bin entrypoint.
- dist/iframe/main.js fetches dkls23_wasm_bg.wasm via a relative local URL; no remote asset is decoded then executed.
- The Function call is wasm-bindgen glue; no eval call or decoded-payload execution was found.
- No child_process, filesystem harvesting, environment-secret collection, or persistence behavior was found.
- Vault uploads are encrypted backup data to the package-aligned api.embarkai.io endpoint.
- Google, Telegram, and Sumsub scripts are named third-party integration flows, not hidden install/import payloads.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
12 flaggeddist/iframe/main.jsView file
15__export(crypto_utils_exports, {
L16: base64ToBytes: () => base64ToBytes,
L17: bytesToBase64: () => bytesToBase64,
...
L158: return {
L159: data: bytesToBase64(new Uint8Array(encryptedData)),
L160: iv: bytesToBase64(iv),
...
L505: const idempotencyKey = crypto.randomUUID ? crypto.randomUUID() : `backup-${Date.now()}`;
L506: const response = await fetch(`${SHARE_VAULT_URL}/v1/shares/me`, {
L507: method: "PUT",
...
L1902: }
L1903: async upload(fileName, content, usePrivateStorage = true) {
L1904: if (!this.isAuthenticated()) {
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/iframe/main.jsView on unpkg · L152747imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L2748: const ret = new Function(getStringFromWasm0(arg0, arg1));
L2749: return ret;
High
•matchType = previous_version_dangerous_delta
matchedPackage = @embarkai/ui-kit@0.4.46
matchedIdentity = npm:QGVtYmFya2FpL3VpLWtpdA:0.4.46
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Findings
1 Critical3 High12 Medium5 Low
CriticalRemote Asset Decode Executedist/iframe/main.js
HighChild Process
HighEvaldist/iframe/main.js
HighPrevious Version Dangerous Deltadist/iframe/main.js
MediumSecret Patterndist/iframe/main.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/dkls23_wasm_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/main.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Pattern
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.4.84.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.4.84 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.