registry / @embarkai/ui-kit / 0.4.85
@embarkai/ui-kit@0.4.85
React UI components and hooks for EmbarkAI authentication and Account Abstraction
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe scanner's dynamic-evaluation/remote-asset signal maps to bundled wasm-bindgen initialization, while network calls are feature-aligned wallet, auth, and user-consented encrypted backup flows. No lifecycle execution or concrete malicious chain was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Consumer renders/uses the UI kit; cloud backup requires a user-initiated backup and OAuth consent.
Impact
No confirmed credential harvesting, covert exfiltration, persistence, destructive action, or remote payload execution.
Mechanism
Browser-based wallet authentication, MPC WASM loading, and encrypted backup operations.
AI rationale
The scanner's dynamic-evaluation/remote-asset signal maps to bundled wasm-bindgen initialization, while network calls are feature-aligned wallet, auth, and user-consented encrypted backup flows. No lifecycle execution or concrete malicious chain was found.
Evidence
package.jsondist/index.cjsdist/iframe/main.jsdist/iframe/oauth/x.jsdist/iframe/oauth/telegram.jsdist/iframe/dkls23_wasm_bg.wasm
Network endpoints6
api.embarkai.io/vaultapi.embarkai.io/tssdashboard.embarkai.io/api/public/projectapis.google.com/js/api.jsaccounts.google.com/gsi/clientwww.googleapis.com/upload/drive/v3/files?uploadType=multipart
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has no lifecycle hooks or bin entrypoints.
- dist/iframe/main.js loads its bundled dkls23_wasm_bg.wasm via import.meta.url, not a decoded remote payload.
- The New Function hit is wasm-bindgen glue; no eval or remote-code decoding was found.
- Cloud backup encrypts data before its user-consented Google Drive upload.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
11 flaggeddist/iframe/main.jsView file
15__export(crypto_utils_exports, {
L16: base64ToBytes: () => base64ToBytes,
L17: bytesToBase64: () => bytesToBase64,
...
L158: return {
L159: data: bytesToBase64(new Uint8Array(encryptedData)),
L160: iv: bytesToBase64(iv),
...
L505: const idempotencyKey = crypto.randomUUID ? crypto.randomUUID() : `backup-${Date.now()}`;
L506: const response = await fetch(`${SHARE_VAULT_URL}/v1/shares/me`, {
L507: method: "PUT",
...
L1902: }
L1903: async upload(fileName, content, usePrivateStorage = true) {
L1904: if (!this.isAuthenticated()) {
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/iframe/main.jsView on unpkg · L152747imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L2748: const ret = new Function(getStringFromWasm0(arg0, arg1));
L2749: return ret;
High
336patternName = generic_password
severity = medium
line = 336
matchedText = throw ne...)));
Medium
Secret Pattern
Findings
1 Critical2 High12 Medium5 Low
CriticalRemote Asset Decode Executedist/iframe/main.js
HighChild Process
HighEvaldist/iframe/main.js
MediumSecret Patterndist/iframe/main.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/dkls23_wasm_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/main.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.cjs
MediumSecret Patterndist/index.cjs
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.4.85.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.4.85 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.