registry / @ujet/websdk-headless / 6.7.0
@ujet/websdk-headless@6.7.0
A prebuilt infrastructure for communicating with your CCaaS servers!
AI Security Review
scanned 3mo ago · by lpm-firewall-aiDirect inspection found a packaged browser SDK with no lifecycle hooks and user-supplied authentication. Network and media behavior aligns with its documented chat and voice purpose; the scanner's exfiltration label is a false positive.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Consumer creates and uses the Client; voice features request browser microphone permission.
Impact
Intended transmission of contact-center data and audio to configured service endpoints; no install-time execution, filesystem harvesting, or covert exfiltration found.
Mechanism
Authenticated UJET chat/call API and WebRTC communication.
AI rationale
Direct inspection found a packaged browser SDK with no lifecycle hooks and user-supplied authentication. Network and media behavior aligns with its documented chat and voice purpose; the scanner's exfiltration label is a false positive.
Evidence
package.jsonREADME.mddist/index.mjsdist/index.jsdist/index.d.ts
Network endpoints3
main.api.ujet.cowebsdk.ujet.co/v3/bridge.htmlwebsdk.ujet.co/v3/ping.mp3
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Manifest exposes only bundled library entrypoints and declares no lifecycle scripts.
- README requires the integrator to supply an authenticate callback and token endpoint.
- Runtime networking is for the documented UJET communications API and explicit chat/call actions.
- Microphone access is requested through browser getUserMedia for voice-call functionality, not at install.
Evidence against
- Bundled code includes browser network, WebSocket, analytics, chat, and voice dependencies, which can look like exfiltration heuristically.
- A keepalive request sends the authenticated user's explicit chat-leave event to the configured UJET host.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•Credential-bearing message sent to a fixed external iframe in dist/index.js:
"use strict";var j4=Object.defineProperty;var GT=r=>{throw TypeError(r)};var B4=(r,e,t)=>e in r?j4(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t;var Re=(r,e,t)=>B...
`+Zr),Ot&&sh([J,Oe,He],vn=>{Zr=Ul(Zr,vn," ")}),B&&xr?B.createHTML(Zr):Zr},e.setConfig=function(){let vt=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};Me(vt),zt=!0},e.cl...
`)),At=et-1,lt=Math.max(At-3,0),Kr=Math.min(At+3,ct.length);return re(ct.slice(lt,Kr),function(en,St,ni){return en[lt+1+ni]=St.length<=W?St:St.substr(0,W),en},{})};p.config.beforeS...
`.replace(/\s*\/\/.*$/gm,"").replace(/\n/g,"").trim(),dV=new RegExp(`(?:^${xs}$)|(?:^${Pv}$)`),fV=new RegExp(`^${xs}$`),hV=new RegExp(`^${Pv}$`),iw=r=>r&&r.exact?dV:new Re
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkg38
Findings
1 Critical1 High4 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
MediumSecret Patterndist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @ujet/websdk-headless@6.7.0.
See all versions of @ujet/websdk-headless for other recorded verdicts.
- Review the evidence and your use of @ujet/websdk-headless@6.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.