registry / @embarkai/ui-kit / 0.6.12
@embarkai/ui-kit@0.6.12
React UI components and hooks for embarkAI authentication and Account Abstraction
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s purpose is an authentication and MPC wallet UI kit, and the inspected token and keyshare flows target its own services. DKG requires authorization, while basic automatic backup is gated on iframe-session authentication; I found no unrelated collection or harmful action.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Wallet operations follow authorized SDK requests; backup work follows DKG or an explicit backup request.
Impact
The inspected behavior does not show credential exfiltration or an unrelated action.
Mechanism
The iframe exchanges scoped tokens with the package’s TSS and vault services and uploads encrypted backup envelopes.
AI rationale
The package’s purpose is an authentication and MPC wallet UI kit, and the inspected token and keyshare flows target its own services. DKG requires authorization, while basic automatic backup is gated on iframe-session authentication; I found no unrelated collection or harmful action.
Network endpoints2
api.embarkai.io/tssapi.embarkai.io/vault
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a React UI kit for authentication and account abstraction, with bundled module entry points.
- Starting DKG requires a valid SDK channel and prior application authorization.
- After successful DKG, the iframe initiates a server-backup check; basic backup creation requires iframe-session authentication.
- Backup uploads send an encrypted share envelope to the package’s own api.embarkai.io vault service.
Evidence against
- No install lifecycle hook is declared in the manifest.
- The inspected token-bearing backup requests target the package’s own TSS and vault services.
- The flagged eval matches are WebAuthn PRF extension fields, not calls to JavaScript eval.
Behavioral surface
EnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
13 flaggeddist/iframe/main.jsView file
20__export(crypto_utils_exports, {
L21: base64ToBytes: () => base64ToBytes,
L22: bytesToBase64: () => bytesToBase64,
...
L169: return {
L170: data: bytesToBase64(new Uint8Array(encryptedData)),
L171: iv: bytesToBase64(iv),
...
L659: const idempotencyKey2 = crypto.randomUUID ? crypto.randomUUID() : `backup-${Date.now()}`;
L660: const response = await fetch(shareUrl("", encryptedShare.ownerAddress), {
L661: method: "PUT",
...
L5369: }
L5370: async upload(fileName, content, usePrivateStorage = true) {
L5371: if (!this.isAuthenticated()) {
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/iframe/main.jsView on unpkg · L206585imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L6586: const ret = new Function(getStringFromWasm0(arg0, arg1));
L6587: return ret;
High
347patternName = generic_password
severity = medium
line = 347
Medium
Secret Pattern
Findings
3 Critical3 High10 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/iframe/main.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighEvaldist/iframe/main.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
HighSemantic Analysis Limiteddist/styles.css
MediumSecret Patterndist/iframe/main.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/dkls23_wasm_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/main.js
MediumSecret Pattern
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.6.12.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.6.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.