@upcoming/multichain-widget@0.12.1
``` npm install @upcoming/multichain-widget ```
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged credential-exfiltration signal was not substantiated, and the manifest has no install hook. However, bundled runtime telemetry can disclose the app domain and event metadata to WalletConnect Pulse without an evident disclosure, so this warrants a warning.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
When the widget's WalletConnect core and event client run, including when telemetry events are submitted.
Impact
The app's domain and usage or error event metadata are disclosed to the telemetry service; no credential theft or unrelated collection was identified.
Mechanism
The event client can send event payloads containing the app domain, a client ID, user-agent metadata, and SDK event data to WalletConnect Pulse.
AI rationale
The flagged credential-exfiltration signal was not substantiated, and the manifest has no install hook. However, bundled runtime telemetry can disclose the app domain and event metadata to WalletConnect Pulse without an evident disclosure, so this warrants a warning.
Evidence
dist/core-BAzjbPAb.mjs
Network endpoints1
pulse.walletconnect.org/batch
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The bundled WalletConnect event client defaults telemetry to enabled and constructs an initialization event containing the app domain, client ID, and user agent.
- The event client POSTs telemetry payloads to the WalletConnect Pulse batch endpoint.
Evidence against
- The manifest declares no install, preinstall, or postinstall hook; its scripts are development and build commands.
- The reviewed credential and environment-variable matches did not show credentials being sent to an unrelated host.
Behavioral surface
ChildProcessCryptoEnvironmentVarsNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/core-BAzjbPAb.mjsView file
103WC_NAME_SUFFIX_LEGACY: ".wcn.id",
L104: BLOCKCHAIN_API_RPC_URL: "https://rpc.walletconnect.org",
L105: PULSE_API_URL: "https://pulse.walletconnect.org",
...
L159: UNSUPPORTED_NETWORK_NAME: "Unknown Network",
L160: SECURE_SITE_SDK_ORIGIN: (typeof process < "u" && typeof process.env < "u" ? process.env.NEXT_PUBLIC_SECURE_SITE_ORIGIN : void 0) || "https://secure.walletconnect.org"
L161: }, hl = {
...
L842: const e = _e({
L843: data: Array.from([]),
L844: has(s) {
...
L1019: if (t)
L1020: return JSON.parse(t);
L1021: } catch {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/core-BAzjbPAb.mjsView on unpkg · L1038682class Hb extends Ch {
constructor(e, s, r = !0) {
super(e, s, r), this.core = e, this.logger = s, Me(this, "context", Hm), Me(this, "storagePrefix", Gt), Me(this, "storageVersion", zm), Me(this, "events", /* @__PURE__ */ new Map()), Me(this, "shouldPersist", !1), Me(this, "init", async () => {
if (!Fo()) try {
Medium
Ai Review Evidence
The bundled WalletConnect event client defaults telemetry to enabled and constructs an initialization event containing the app domain, client ID, and user agent.
dist/core-BAzjbPAb.mjsView on unpkg · L8682Findings
2 Critical2 High5 Medium3 Low
CriticalCredential Exfiltrationdist/core-BAzjbPAb.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/multichain-widget.umd.js
HighTrigger Reachable Credential Exfiltrationdist/multichain-widget.umd.js
HighSemantic Analysis Limiteddist/index.es-BW68ywcT.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/multichain-widget.umd.js
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/core-BAzjbPAb.mjs
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @upcoming/multichain-widget@0.12.1.
See all versions of @upcoming/multichain-widget for other recorded verdicts.
- Review the evidence and your use of @upcoming/multichain-widget@0.12.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.