registry  /  @flowengage/react-chatbot  /  8.0.26

@flowengage/react-chatbot@8.0.26

Embeddable AI chat widget for React — powered by FlowEngage. Drop it in with a single siteId.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedProtestwareTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 2.93 MB of source, external domains: aomediacodec.github.io, api.elevenlabs.io, be-flowengage-dev.oslabs.app, cdn.jsdelivr.net, fonts.googleapis.com, github.com, motion.dev, react.dev, socket.io, www.google.com, www.w3.org

Source & flagged code

3 flagged · loading source
dist/flowengage-react-chatbot.mjsView file
15317patternName = generic_password severity = medium line = 15317 matchedText = let t = ...\n";
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/flowengage-react-chatbot.mjsView on unpkg · L15317
dist/flowengage-embed.jsView file
32} L33: `,document.head.appendChild(e)};function br(e,t){if(typeof document>`u`)return null;if(e){let n=document.getElementById(e)||document.querySelector(`[data-section="${e}"]`);if(n)ret... L34: `:case`\r`:case` `:case` `:continue;default:throw Error(`invalid base64 string.`)}switch(i){case 0:o=a,i=1;break;case 1:n[r++]=o<<2|(a&48)>>4,o=a,i=2;break;case 2:n[r++]=(o&15)<<4|...
High
Child Process

Package source references child process execution.

dist/flowengage-embed.jsView on unpkg · L32
32} L33: `,document.head.appendChild(e)};function br(e,t){if(typeof document>`u`)return null;if(e){let n=document.getElementById(e)||document.querySelector(`[data-section="${e}"]`);if(n)ret... L34: `:case`\r`:case` `:case` `:continue;default:throw Error(`invalid base64 string.`)}switch(i){case 0:o=a,i=1;break;case 1:n[r++]=o<<2|(a&48)>>4,o=a,i=2;break;case 2:n[r++]=(o&15)<<4|...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/flowengage-embed.jsView on unpkg · L32

Findings

2 High5 Medium5 Low
HighChild Processdist/flowengage-embed.js
HighSame File Env Network Executiondist/flowengage-embed.js
MediumSecret Patterndist/flowengage-react-chatbot.mjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings