registry / @nextclaw/ui / 0.15.6

@nextclaw/ui@0.15.6

Official NextClaw Web UI package.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a Vite/React UI that talks to its configured NextClaw runtime and lazily renders presentation data in the browser.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User opens the UI or previews a presentation file.

Impact

No unconsented install-time or import-time mutation, data theft, remote payload execution, or persistence was found.

Mechanism

Browser UI API/WebSocket client and lazy PPTX rendering.

Rationale

Scanner indicators resolve to ordinary frontend transport and document-preview behavior. Direct inspection found no concrete malicious chain, including no lifecycle execution or host-control actions.

Evidence

package.jsonsrc/main.tsxvite.config.tssrc/shared/lib/api/api-base.tssrc/shared/lib/transport/remote-transport.service.tssrc/features/chat/features/workspace/components/file-content-preview/workspace-presentation-preview.tsxdist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jssrc/shared/lib/transport/transport-websocket-url.utils.tssrc/shared/lib/transport/request-raw-api-response.utils.ts

Network endpoints2

127.0.0.1:55667127.0.0.1:18792

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

`package.json` pins `xlsx` to a remote tarball.
`dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js` contains a dynamic PDF.js import and a zero-width formatting character.

Evidence against

`package.json` has no preinstall/install/postinstall/prepare hooks or bin/entrypoint fields.
`src/main.tsx` is a browser React bootstrap with no import-time host actions.
`workspace-presentation-preview.tsx` loads the renderer only to preview a user-selected PPTX buffer.
`api-base.ts` defaults API traffic to localhost; transport code targets configured runtime endpoints.
No source imports Node filesystem, shell, VM, or process-execution APIs.
No source evidence of credential harvesting, exfiltration, persistence, or agent-control mutation.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinified

Source & flagged code

3 flagged

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView file

23contains invisible/control Unicode U+200B (zero width space) `){let e=u.endParaRPr.numAttr(`sz`);if(e!==void 0){let t=document.createElement(`span`);t.textContent=`<U+200B>`,t.style.fontSize=`${e/100*o}pt`,(k??m).appendChild(t)}}r.appendChild(m)}}function LH(e){let t=0,n=0;for(let r of e.allChildren(

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L23

36if (!pdfjsLib) { L37: pdfjsLib = await import(pdfjsUrl); L38: pdfjsLib.GlobalWorkerOptions.workerSrc = pdfWorkerUrl;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L36

package.jsonView file

Lines 41-69json

41 "@nextclaw/ncp-toolkit": "0.6.5",

42 "@nextclaw/shared": "0.4.4",

43 "@nextclaw/ncp-http-agent-client": "0.4.4"

44 },

45 "devDependencies": {

46 "@testing-library/react": "^16.3.0",

47 "@testing-library/user-event": "^14.6.1",

48 "@types/react": "^18.3.12",

49 "@types/react-dom": "^18.3.1",

50 "@vitejs/plugin-react": "^6.0.1",

51 "autoprefixer": "^10.4.20",

52 "jsdom": "^25.0.1",

53 "postcss": "^8.4.49",

54 "prettier": "^3.3.3",

55 "tailwindcss": "^3.4.15",

56 "tailwindcss-animate": "^1.0.7",

57 "typescript": "^5.6.3",

58 "vite": "^8.0.3",

59 "vitest": "^4.1.2"

60 },

61 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L61

62 "dev": "vite",

63 "build": "vite build",

64 "preview": "vite preview",

65 "lint": "eslint .",

66 "tsc": "tsc --noEmit",

67 "test": "vitest run"

68 }

69}

Source & flagged code

3 flagged · loading source

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L23

36if (!pdfjsLib) { L37: pdfjsLib = await import(pdfjsUrl); L38: pdfjsLib.GlobalWorkerOptions.workerSrc = pdfWorkerUrl;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L36

package.jsonView file

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Findings

1 Critical6 Medium5 Low

CriticalTrojan Source Unicodedist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js

MediumDynamic Requiredist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings