registry / @embarkai/ui-kit / 0.6.13
@embarkai/ui-kit@0.6.13
React UI components and hooks for embarkAI authentication and Account Abstraction
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest and inspected bundle match a wallet authentication and account-abstraction UI kit. The flagged vault traffic uploads encrypted keyshare backups to embarkAI, with automatic backup limited to the iframe authentication flow after DKG.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Backup may run after DKG completion in iframe authentication mode; other authentication and vault calls are feature-driven.
Impact
No malicious impact identified from the inspected source.
Mechanism
The bundle encrypts keyshare data before sending it to the package’s embarkAI vault endpoint.
AI rationale
The manifest and inspected bundle match a wallet authentication and account-abstraction UI kit. The flagged vault traffic uploads encrypted keyshare backups to embarkAI, with automatic backup limited to the iframe authentication flow after DKG.
Network endpoints1
api.embarkai.io/vault
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a React UI kit for embarkAI authentication and account abstraction.
- The manifest declares no install, preinstall, or postinstall lifecycle hooks.
- Keyshare data is encrypted before upload and sent as an `encryptedShare` payload.
- The iframe bundle’s vault endpoint is `https://api.embarkai.io/vault`, consistent with the package’s embarkAI service purpose.
- The automatic backup call follows DKG completion and allows basic backups only in iframe authentication mode.
- The flagged `eval` occurrence is the WebAuthn PRF extension option, not dynamic code execution.
Evidence against
- A server backup can be initiated automatically after DKG in iframe authentication mode, though the upload is part of the wallet backup flow.
- The bundle contains network and filesystem-related behavior, which is consistent with its authentication, wallet, and backup features.
Behavioral surface
EnvironmentVarsEvalFilesystemNetwork
Source & flagged code
13 flaggeddist/iframe/main.jsView file
20__export(crypto_utils_exports, {
L21: base64ToBytes: () => base64ToBytes,
L22: bytesToBase64: () => bytesToBase64,
...
L169: return {
L170: data: bytesToBase64(new Uint8Array(encryptedData)),
L171: iv: bytesToBase64(iv),
...
L659: const idempotencyKey2 = crypto.randomUUID ? crypto.randomUUID() : `backup-${Date.now()}`;
L660: const response = await fetch(shareUrl("", encryptedShare.ownerAddress), {
L661: method: "PUT",
...
L5369: }
L5370: async upload(fileName, content, usePrivateStorage = true) {
L5371: if (!this.isAuthenticated()) {
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/iframe/main.jsView on unpkg · L206585imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L6586: const ret = new Function(getStringFromWasm0(arg0, arg1));
L6587: return ret;
High
347patternName = generic_password
severity = medium
line = 347
Medium
Secret Pattern
Findings
3 Critical3 High10 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/iframe/main.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighEvaldist/iframe/main.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
HighSemantic Analysis Limiteddist/styles.css
MediumSecret Patterndist/iframe/main.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/dkls23_wasm_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/main.js
MediumSecret Pattern
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.6.13.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.6.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.