registry / @embarkai/ui-kit / 0.6.11
@embarkai/ui-kit@0.6.11
React UI components and hooks for embarkAI authentication and Account Abstraction
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged credential-exfiltration claim is not supported: the observed backup traffic goes to EmbarkAI's own service and uploads an encrypted envelope. The package can still create that server-managed wallet backup automatically after sign-in, so warn users about the sensitive default behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Successful sign-in with iframe authentication and an available keyshare, when no server backup exists.
Impact
A sensitive wallet keyshare is enrolled in the vendor's server-managed recovery flow without a distinct backup action from the user.
Mechanism
Post-login synchronization calls `ensureServerBackup`; the iframe can create an encrypted Basic envelope and PUT it to EmbarkAI's vault using a bearer resource token.
AI rationale
The flagged credential-exfiltration claim is not supported: the observed backup traffic goes to EmbarkAI's own service and uploads an encrypted envelope. The package can still create that server-managed wallet backup automatically after sign-in, so warn users about the sensitive default behavior.
Evidence
dist/index.jsdist/iframe/main.js
Network endpoints2
api.embarkai.io/vault/v1/shares/meapi.embarkai.io/tss/api/auth/backup/recovery-dek/wrap
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- After sign-in, the UI flow calls `syncServerBackupAfterLogin` automatically.
- That sync calls `ensureServerBackup` with the user's access token.
- Iframe authentication allows Basic backup creation; the creation path proceeds unless `allowCreate` is false.
- The Basic backup path encrypts the keyshare into an envelope, then PUTs that envelope to the vault with a bearer resource token. The vault is hosted at `api.embarkai.io`.
Evidence against
- The backup flow sends data to the package's own EmbarkAI service, consistent with its wallet and MPC key-management purpose.
- The uploaded keyshare is encrypted into an envelope; the source does not show credentials being sent to an unrelated host.
- The manifest declares no lifecycle scripts, and the automatic backup is tied to sign-in rather than package installation.
Behavioral surface
EnvironmentVarsEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
13 flaggeddist/iframe/main.jsView file
20__export(crypto_utils_exports, {
L21: base64ToBytes: () => base64ToBytes,
L22: bytesToBase64: () => bytesToBase64,
...
L169: return {
L170: data: bytesToBase64(new Uint8Array(encryptedData)),
L171: iv: bytesToBase64(iv),
...
L659: const idempotencyKey2 = crypto.randomUUID ? crypto.randomUUID() : `backup-${Date.now()}`;
L660: const response = await fetch(shareUrl("", encryptedShare.ownerAddress), {
L661: method: "PUT",
...
L5369: }
L5370: async upload(fileName, content, usePrivateStorage = true) {
L5371: if (!this.isAuthenticated()) {
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/iframe/main.jsView on unpkg · L206585imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L6586: const ret = new Function(getStringFromWasm0(arg0, arg1));
L6587: return ret;
High
347patternName = generic_password
severity = medium
line = 347
Medium
Secret Pattern
Findings
3 Critical3 High10 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/iframe/main.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighEvaldist/iframe/main.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
HighSemantic Analysis Limiteddist/styles.css
MediumSecret Patterndist/iframe/main.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/dkls23_wasm_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/main.js
MediumSecret Pattern
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.6.11.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.6.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.