registry / @embarkai/ui-kit / 0.6.17
@embarkai/ui-kit@0.6.17
React UI components and hooks for embarkAI authentication and Account Abstraction
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe reported credential flow is feature-triggered and sends an Embark access token to the package’s own API. The manifest shows no install hook, and the inspected iframe message handler validates origins.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
On-ramp API requests occur when the consuming application invokes those queries.
Impact
The inspected flow sends a feature-required token to the package’s own service; no unrelated collection or exfiltration was found.
Mechanism
The UI kit passes its access token to the iframe, which sends it as a bearer token to the Embark API.
AI rationale
The reported credential flow is feature-triggered and sends an Embark access token to the package’s own API. The manifest shows no install hook, and the inspected iframe message handler validates origins.
Network endpoints3
api.embarkai.io/tssapi.embarkai.io/vaultapi.embarkai.io/on-ramp/api
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a React UI kit for embarkAI authentication and account abstraction.
- The package scripts shown are build and development tasks; no install lifecycle hook is declared.
- The iframe’s on-ramp API defaults to `https://api.embarkai.io/on-ramp/api`.
- On-ramp requests attach an access token as a bearer token to that API.
- The library passes its access token to the iframe when an on-ramp query is invoked.
- The iframe validates message origins and rejects unauthorized origins.
Evidence against
- The flagged token-bearing traffic is consistent with the package’s authentication and on-ramp features; no unrelated credential source or collector was identified.
Behavioral surface
EnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
13 flaggeddist/iframe/assets/main-DvSssncy.jsView file
68const [path, search = ""] = pathWithQuery.split("?", 2);
L69: const query = new URLSearchParams(search);
L70: const route = ACCOUNT_ROUTES.find((r) => r.method === method && r.path.test(path));
...
L245: function defaultTssUrl$2() {
L246: return "https://api.embarkai.io/tss";
L247: }
...
L382: if (response.status === 401) {
L383: if (await response.json().catch(() => null)) {
L384: this.clear();
...
L586: *
L587: * @private
L588: * @param {*} value The value to query.
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/iframe/assets/main-DvSssncy.jsView on unpkg · L686323imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
L6324: return new Function(getStringFromWasm0(arg0, arg1));
L6325: };
High
Eval
Package source references dynamic code evaluation.
dist/iframe/assets/main-DvSssncy.jsView on unpkg · L63234272patternName = generic_password
severity = medium
line = 4272
Medium
Findings
3 Critical3 High10 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/iframe/assets/main-DvSssncy.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighEvaldist/iframe/assets/main-DvSssncy.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
HighSemantic Analysis Limiteddist/styles.css
MediumSecret Patterndist/iframe/assets/main-DvSssncy.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/iframe/assets/dkls23_wasm_bg-Cn3nHBRm.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/iframe/assets/main-DvSssncy.js
Affected versions and remediation
This report applies to @embarkai/ui-kit@0.6.17.
See all versions of @embarkai/ui-kit for other recorded verdicts.
- Review the evidence and your use of @embarkai/ui-kit@0.6.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.