registry / @nextclaw/ui / 0.15.10

@nextclaw/ui@0.15.10

Official NextClaw Web UI package.

AI Security Review

scanned 4d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The browser UI connects to its configured NextClaw runtime and loads workspace files only when a user opens previews.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User opens the NextClaw UI or previews a workspace presentation.

Impact

No unconsented code execution, exfiltration, persistence, or destructive behavior found.

Mechanism

Configured local/origin API transport and lazy client-side document rendering.

Rationale

Static hints resolve to normal browser UI behavior: lazy PPTX previewing and configured NextClaw API transport. The remote tarball and isolated U+200B warrant supply-chain awareness but do not form a concrete malicious chain in this package.

Evidence

package.jsonsrc/shared/lib/transport/app-client.service.tssrc/shared/lib/transport/remote-transport.service.tssrc/features/chat/features/workspace/components/file-content-preview/workspace-presentation-preview.tsxdist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jssrc/shared/lib/transport/local-transport.service.tssrc/features/chat/features/workspace/components/file-content-preview/use-workspace-file-buffer.ts

Network endpoints3

127.0.0.1:55667/

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json pins xlsx to a cdn.sheetjs.com tarball.
dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js contains one U+200B byte sequence.
Workspace presentation preview dynamically imports the renderer after preview data is available.

Evidence against

package.json has no preinstall, install, postinstall, or executable bin hook.
Renderer import is user-triggered for local workspace PPTX preview with abort and destroy cleanup.
Renderer bundle inspection found no eval, Function, shell, child_process, fetch, WebSocket, cookie, or beacon primitive.
Transport targets configured/current-origin NextClaw API endpoints; default is localhost.
No credential harvesting, filesystem mutation, persistence, or AI-agent control-surface writes were found.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

3 flagged

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView file

23contains invisible/control Unicode U+200B (zero width space) `){let e=u.endParaRPr.numAttr(`sz`);if(e!==void 0){let t=document.createElement(`span`);t.textContent=`<U+200B>`,t.style.fontSize=`${e/100*o}pt`,(k??m).appendChild(t)}}r.appendChild(m)}}function LH(e){let t=0,n=0;for(let r of e.allChildren(

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L23

36if (!pdfjsLib) { L37: pdfjsLib = await import(pdfjsUrl); L38: pdfjsLib.GlobalWorkerOptions.workerSrc = pdfWorkerUrl;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L36

package.jsonView file

Lines 41-69json

41 "@nextclaw/ncp-react": "0.5.8",

42 "@nextclaw/ncp-toolkit": "0.6.7",

43 "@nextclaw/agent-chat": "0.3.4"

44 },

45 "devDependencies": {

46 "@testing-library/react": "^16.3.0",

47 "@testing-library/user-event": "^14.6.1",

48 "@types/react": "^18.3.12",

49 "@types/react-dom": "^18.3.1",

50 "@vitejs/plugin-react": "^6.0.1",

51 "autoprefixer": "^10.4.20",

52 "jsdom": "^25.0.1",

53 "postcss": "^8.4.49",

54 "prettier": "^3.3.3",

55 "tailwindcss": "^3.4.15",

56 "tailwindcss-animate": "^1.0.7",

57 "typescript": "^5.6.3",

58 "vite": "^8.0.3",

59 "vitest": "^4.1.2"

60 },

61 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L61

62 "dev": "vite",

63 "build": "vite build",

64 "preview": "vite preview",

65 "lint": "eslint .",

66 "tsc": "tsc --noEmit",

67 "test": "vitest run"

68 }

69}

Source & flagged code

3 flagged · loading source

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L23

36if (!pdfjsLib) { L37: pdfjsLib = await import(pdfjsUrl); L38: pdfjsLib.GlobalWorkerOptions.workerSrc = pdfWorkerUrl;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L36

package.jsonView file

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Findings

1 Critical6 Medium5 Low

CriticalTrojan Source Unicodedist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js

MediumDynamic Requiredist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings