@lydianpay/sdk-web@3.6.0
Drop-in crypto payment checkout for the web — a <lydian-checkout> web component and window.Lydian API across 20+ chains and major stablecoins.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe source does not substantiate the scanner’s credential-exfiltration claim: the flagged Basic auth is derived from a Lydian session and sent to its configured link API. However, the bundled WalletConnect client sends runtime telemetry by default, and the README does not disclose it, so this warrants a warning rather than a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
When checkout initialization reaches the WalletConnect client, such as during a wallet connection flow.
Impact
Discloses app and SDK usage metadata to WalletConnect without a documented telemetry disclosure or opt-out in this package.
Mechanism
The bundled event client sends an INIT event and other telemetry to WalletConnect’s pulse endpoint; the INIT event includes a generated client ID and user-agent data, and events include the app domain.
AI rationale
The source does not substantiate the scanner’s credential-exfiltration claim: the flagged Basic auth is derived from a Lydian session and sent to its configured link API. However, the bundled WalletConnect client sends runtime telemetry by default, and the README does not disclose it, so this warrants a warning rather than a clean verdict.
Evidence
dist/chunks/mountEngine-CVnwr305.jsdist/chunks/index-9i2S104v.jsREADME.md
Network endpoints1
pulse.walletconnect.org/batch
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The bundled WalletConnect event client defaults telemetry on and creates an INIT event containing a client ID and user-agent data.
- It sends telemetry events to https://pulse.walletconnect.org/batch with the configured project ID and event payload.
- The wallet engine loads on checkout initialization, and the WalletConnect client is created when its wallet connection service is used.
- The README describes the WalletConnect project ID as powering wallet connections but does not disclose this telemetry.
- The flagged Basic auth value is built from the Lydian session ID and secret and used with the configured link API URL.
Evidence against
- The manifest entry is a web checkout SDK; its package script is a prepublishOnly CI guard, not an install hook.
- The engine is loaded on demand rather than when the package entry is imported.
- The telemetry payload shown includes a generated client ID, user-agent data and app domain; the reviewed code does not show unrelated credentials being collected or sent.
Behavioral surface
ChildProcess
Source & flagged code
4 flaggeddist/chunks/mountEngine-CVnwr305.jsView file
7}
L8: const P8 = '*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-sca...
L9: <!-- One set of screen shells serves both flows. initializeComponents() stamps
...
L624: gE
L625: ], D_ = ["eth_sendTransaction", "personal_sign", "eth_signTypedData", "eth_sign"], O_ = ["accountsChanged", "chainChanged"], N_ = [
L626: "solana_signTransaction",
...
L763: payButtonsSlot: "#payButtonsSlot",
L764: closeDialogBody: "#modalCloseTransactionModal .modal-body",
L765: restoreDialogBody: "#modalRestoreDetails .modal-body"
...
L2320: function(s) {
L2321: return "\\" + s.charCodeAt(0).toString(16) + " ";
L2322: }
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunks/mountEngine-CVnwr305.jsView on unpkg · L77Trigger-reachable chain: manifest.main -> dist/lydian.js -> dist/chunks/index-9i2S104v.js -> dist/chunks/mountEngine-CVnwr305.js
L7: }
L8: const P8 = '*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-sca...
L9: <!-- One set of screen shells serves both flows. initializeComponents() stamps
...
L624: gE
L625: ], D_ = ["eth_sendTransaction", "personal_sign", "eth_signTypedData", "eth_sign"], O_ = ["accountsChanged", "chainChanged"], N_ = [
L626: "solana_signTransaction",
...
L763: payButtonsSlot: "#payButtonsSlot",
L764: closeDialogBody: "#modalCloseTransactionModal .modal-body",
L765: restoreDialogBody: "#modalRestoreDetails .modal-body"
...
L2320: function(s) {
L2321: return "
Findings
2 Critical2 High3 Medium5 Low
CriticalCredential Exfiltrationdist/chunks/mountEngine-CVnwr305.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunks/mountEngine-CVnwr305.js
HighTrigger Reachable Credential Exfiltrationdist/chunks/mountEngine-CVnwr305.js
HighSemantic Analysis Limiteddist/chunks/mountEngine-CVnwr305.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @lydianpay/sdk-web@3.6.0.
See all versions of @lydianpay/sdk-web for other recorded verdicts.
- Review the evidence and your use of @lydianpay/sdk-web@3.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.