registry / @upcoming/multichain-widget

@upcoming/multichain-widget

``` npm install @upcoming/multichain-widget ```

This report shows the evidence for @upcoming/multichain-widget@0.13.3. 0 of 7 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The manifest exposes built widget bundles and declares no install hooks. Although a bundled chunk reads RAINBOW_PROVIDER_API_KEY, the source uses it as an API key for enhanced-provider.rainbow.me, which matches the Rainbow provider integration and does not establish credential exfiltration.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The client is initialized when its bundled module is evaluated; provider requests occur when the relevant Rainbow functionality is used.

Impact

The inspected source shows a credential directed to its corresponding provider service, with no evidence of unrelated collection or malicious behavior.

Mechanism

The RAINBOW_PROVIDER_API_KEY value, or a bundled fallback key, is configured as an x-api-key for enhanced-provider.rainbow.me.

AI rationale

Network endpoints1

enhanced-provider.rainbow.me

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest has no install lifecycle scripts; it exposes bundled widget entry points.
The flagged environment variable is specifically RAINBOW_PROVIDER_API_KEY and is used as an x-api-key for enhanced-provider.rainbow.me, Rainbow's provider endpoint.
The source initializes a Rainbow fetch client; the inspected code does not show this value being sent to an unrelated host.

Evidence against

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsEvalNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 165 file(s), 6.98 MB of source, external domains: 11155111.rpc.thirdweb.com, 127.0.0.1, 1666600000.rpc.thirdweb.com, 21000000.rpc.thirdweb.com, 21000001.rpc.thirdweb.com, 250.rpc.thirdweb.com, 4byte.sourcify.dev, 5.rpc.thirdweb.com, 56.rpc.thirdweb.com, 5irescan.io, 80001.rpc.thirdweb.com, abeyscan.com, abitype.dev, abscan.org, addons.mozilla.org, addons.opera.com, aeneid.storyrpc.io, aeneid.storyscan.io, affectionate-immediate-pollux.explorer.mainnet.skalenodes.com, agung-testnet.subscan.io, aic.acria.ai, albireo-explorer.playfi.ai, albireo-rpc.playfi.ai, alfajores-forno.celo-testnet.org, alpha-rpc-node-http.svmscan.io, alphanet.load.network, amoy.polygonscan.com, analytics-service-dev.cbhq.net, analytics-service-internal-dev.cbhq.net, analytics-service-internal.cbhq.net, andromeda.metis.io, anon-entrypoint-1.atgraphite.com, anon-entrypoint-test-1.atgraphite.com, apescan.io, api-cypress.klaytnscope.com, api-dchain-2716446429837000-1.sagaexplorer.io, api-dchaintestnet-2713017997578000-1.testnet.sagaexplorer.io, api-era.zksync.network, api-goerli.etherscan.io, api-goerli.lineascan.build, api-holesky.etherscan.io, api-holesky.fraxscan.com, api-moonbeam.moonscan.io, api-moonriver.moonscan.io, api-nova.arbiscan.io, api-opbnb.bscscan.com, api-optimistic.etherscan.io, api-sepolia-era.zksync.network, api-sepolia.arbiscan.io, api-sepolia.basescan.org

Source & flagged code

6 flagged

dist/index.es-BgSZaIrD.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index.es-BgSZaIrD.mjsView on unpkg

1180async function df({ hash: r, signature: e }) { L1181: const t = _i(r) ? r : Bn(r), { secp256k1: i } = await import("./secp256k1-C5_HGjGu.mjs"); L1182: return `0x${(() => {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.es-BgSZaIrD.mjsView on unpkg · L1180

dist/index-C3-04IsQ.mjsView file

78function KI() { L79: return Y6 || (Y6 = 1, process.env.NODE_ENV !== "production" && (function() { L80: function e(_) { ... L170: G || (G = !0, console.error( L171: "%s: `key` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you should pass it as a di... L172: re ... L358: fonts: { L359: body: JI[t] L360: }, ... L3024: let n = Jt(e); L3025: return t.size && (Nn(n, { size: t.size }), n = Ut(n, { dir: "right" })), new TextDecoder().decode(n); L3026: }

Findings

2 Critical2 High5 Medium4 Low

CriticalCredential Exfiltrationdist/index-C3-04IsQ.mjs

CriticalTrigger Reachable Dangerous Capabilitydist/multichain-widget.umd.js

HighTrigger Reachable Credential Exfiltrationdist/multichain-widget.umd.js

HighSemantic Analysis Limiteddist/index.es-BgSZaIrD.mjs

MediumDynamic Requiredist/index.es-BgSZaIrD.mjs

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/multichain-widget.umd.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @upcoming/multichain-widget@0.13.3.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @upcoming/multichain-widget@0.13.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-01 12:30:42.826Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

7 known versions

0.13.3latestshownClean—AllowPublishedOct 13, 2026, 9:36 AM 0.13.2SuspiciousTelemetryWarnPublishedOct 13, 2026, 8:52 AM 0.13.0Clean—AllowPublishedSep 11, 2026, 9:21 AM 0.12.2SuspiciousTelemetryWarnPublishedAug 31, 2026, 2:50 PM

registry / @upcoming/multichain-widget

@upcoming/multichain-widget

``` npm install @upcoming/multichain-widget ```

This report shows the evidence for @upcoming/multichain-widget@0.13.3. 0 of 7 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The client is initialized when its bundled module is evaluated; provider requests occur when the relevant Rainbow functionality is used.

Impact

The inspected source shows a credential directed to its corresponding provider service, with no evidence of unrelated collection or malicious behavior.

Mechanism

The RAINBOW_PROVIDER_API_KEY value, or a bundled fallback key, is configured as an x-api-key for enhanced-provider.rainbow.me.

AI rationale

Network endpoints1

enhanced-provider.rainbow.me

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest has no install lifecycle scripts; it exposes bundled widget entry points.
The flagged environment variable is specifically RAINBOW_PROVIDER_API_KEY and is used as an x-api-key for enhanced-provider.rainbow.me, Rainbow's provider endpoint.
The source initializes a Rainbow fetch client; the inspected code does not show this value being sent to an unrelated host.

Evidence against

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsEvalNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

6 flagged

dist/index.es-BgSZaIrD.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index.es-BgSZaIrD.mjsView on unpkg

1180async function df({ hash: r, signature: e }) { L1181: const t = _i(r) ? r : Bn(r), { secp256k1: i } = await import("./secp256k1-C5_HGjGu.mjs"); L1182: return `0x${(() => {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.es-BgSZaIrD.mjsView on unpkg · L1180

dist/index-C3-04IsQ.mjsView file

Findings

2 Critical2 High5 Medium4 Low

CriticalCredential Exfiltrationdist/index-C3-04IsQ.mjs

CriticalTrigger Reachable Dangerous Capabilitydist/multichain-widget.umd.js

HighTrigger Reachable Credential Exfiltrationdist/multichain-widget.umd.js

HighSemantic Analysis Limiteddist/index.es-BgSZaIrD.mjs

MediumDynamic Requiredist/index.es-BgSZaIrD.mjs

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/multichain-widget.umd.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @upcoming/multichain-widget@0.13.3.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @upcoming/multichain-widget@0.13.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-01 12:30:42.826Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

7 known versions