@embarkai/ui-kit@0.4.95
React UI components and hooks for EmbarkAI authentication and Account Abstraction
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe readable source establishes a dynamic code-execution primitive controlled by an opaque bundled binary, so a clean decision is not sufficiently supported. The inspected manifest and loader do not establish malicious installation behavior or a confirmed data-theft chain.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Loading the iframe functionality that initializes the DKLS WebAssembly component.
Impact
Opaque embedded binary code could execute JavaScript in the browser context if it invokes this import.
Mechanism
WebAssembly-controlled dynamic JavaScript function creation.
AI rationale
The readable source establishes a dynamic code-execution primitive controlled by an opaque bundled binary, so a clean decision is not sufficiently supported. The inspected manifest and loader do not establish malicious installation behavior or a confirmed data-theft chain.
Evidence
dist/iframe/main.jsdist/iframe/dkls23_wasm_bg.wasm
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The iframe bundle exposes new Function with source supplied by WebAssembly memory.
- The iframe loads a bundled WebAssembly module at runtime, leaving executable binary behavior outside readable JavaScript review.
Evidence against
- The manifest has no preinstall, install, or postinstall hook.
- The WebAssembly loader defaults to a package-relative asset rather than a remote URL.
- No child-process invocation or environment-secret transmission was found in the inspected source.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
12 flaggeddist/iframe/main.jsView file
15__export(crypto_utils_exports, {
L16: base64ToBytes: () => base64ToBytes,
L17: bytesToBase64: () => bytesToBase64,
...
L158: return {
L159: data: bytesToBase64(new Uint8Array(encryptedData)),
L160: iv: bytesToBase64(iv),
...
L505: const idempotencyKey = crypto.randomUUID ? crypto.randomUUID() : `backup-${Date.now()}`;
L506: const response = await fetch(`${SHARE_VAULT_URL}/v1/shares/me`, {
L507: method: "PUT",
...
L1902: }
L1903: async upload(fileName, content, usePrivateStorage = true) {
L1904: if (!this.isAuthenticated()) {
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/iframe/main.jsView on unpkg · L152747imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L2748: const ret = new Function(getStringFromWasm0(arg0, arg1));
L2749: return ret;
High
336patternName = generic_password
severity = medium
line = 336
Medium
Secret Pattern
Package contains a possible secret pattern.
Findings
1 Critical3 High12 Medium5 Low
CriticalRemote Asset Decode Executedist/iframe/main.js
HighChild Process
HighEvaldist/iframe/main.js
HighSemantic Analysis Limiteddist/styles.css
MediumSecret Patterndist/iframe/main.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/dkls23_wasm_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/main.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/index.js
MediumSecret Pattern
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.4.95.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.4.95 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.