registry / @ujet/websdk-headless / 6.9.0
@ujet/websdk-headless@6.9.0
A prebuilt infrastructure for communicating with your CCaaS servers!
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe scanner findings correspond to expected browser SDK networking, authentication, attachments, and bundled telemetry. Source inspection found no install-time execution or concrete malicious/exfiltration chain outside requested service functionality.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Host application creates Client and invokes chat/voice features.
Impact
User-provided chat data and selected attachments are sent as part of requested support interactions.
Mechanism
Authenticated browser requests to configured CCaaS service endpoints.
AI rationale
The scanner findings correspond to expected browser SDK networking, authentication, attachments, and bundled telemetry. Source inspection found no install-time execution or concrete malicious/exfiltration chain outside requested service functionality.
Evidence
package.jsonREADME.mddist/index.mjsdist/index.jsdist/index.d.ts
Network endpoints4
main.api.ujet.cowebsdk.ujet.co/v3/bridge.htmlnotify.bugsnag.comsessions.bugsnag.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Runtime config defaults to UJET API and bridge URLs.
- A user-triggered chat leave request sends the SDK auth token to its configured host.
- Chat file upload sends the caller-provided File to a server-provided upload URL.
- Bundle includes Bugsnag telemetry endpoint defaults.
Evidence against
- package.json has no lifecycle scripts or bin entrypoint.
- README requires the integrator to supply an authenticate callback before creating Client.
- Network and file operations implement the documented CCaaS chat/voice SDK workflow.
- No Node file/process APIs, persistence hooks, payload loading, or AI-agent control-surface writes were found.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•Credential-bearing message sent to a fixed external iframe in dist/index.js:
"use strict";var W4=Object.defineProperty;var XT=r=>{throw TypeError(r)};var V4=(r,e,t)=>e in r?W4(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t;var Te=(r,e,t)=>V...
`+Zr),Ot&&uh([J,Oe,He],vn=>{Zr=Bl(Zr,vn," ")}),B&&xr?B.createHTML(Zr):Zr},e.setConfig=function(){let vt=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};Me(vt),zt=!0},e.cl...
`)),At=et-1,lt=Math.max(At-3,0),Kr=Math.min(At+3,ct.length);return re(ct.slice(lt,Kr),function(en,St,ni){return en[lt+1+ni]=St.length<=W?St:St.substr(0,W),en},{})};p.config.beforeS...
`.replace(/\s*\/\/.*$/gm,"").replace(/\n/g,"").trim(),gV=new RegExp(`(?:^${xs}$)|(?:^${xv}$)`),mV=new RegExp(`^${xs}$`),yV=new RegExp(`^${xv}$`),cw=r=>r&&r.exact?gV:new Re
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkg38
Findings
1 Critical1 High4 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
MediumSecret Patterndist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
LowAi Review Evidencedist/index.mjs
Affected versions and remediation
This report applies to @ujet/websdk-headless@6.9.0.
See all versions of @ujet/websdk-headless for other recorded verdicts.
- Review the evidence and your use of @ujet/websdk-headless@6.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.