@upcoming/multichain-widget@0.12.2
``` npm install @upcoming/multichain-widget ```
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe malicious credential-exfiltration finding is not supported by the inspected code. However, WalletConnect runtime telemetry is enabled by default and includes app-domain context, so this is a warning-level telemetry privacy risk.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
WalletConnect Core initialization when the widget’s application uses the SDK; telemetry defaults to enabled.
Impact
Telemetry may identify the application domain and associate SDK events with its project or client. No credential theft or unrelated collector was identified.
Mechanism
The event client gathers SDK events and posts them to the WalletConnect pulse endpoint, with project, app-domain, client, and event metadata.
AI rationale
The malicious credential-exfiltration finding is not supported by the inspected code. However, WalletConnect runtime telemetry is enabled by default and includes app-domain context, so this is a warning-level telemetry privacy risk.
Evidence
dist/core-CHgHoX6U.mjs
Network endpoints1
pulse.walletconnect.org
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- WalletConnect’s event client enables telemetry by default when no setting is supplied.
- The SDK posts event data to pulse.walletconnect.org, including project and app-domain context, client IDs, and protocol event metadata.
- The package manifest has no install, preinstall, or postinstall hook.
Evidence against
- The environment reads are named NEXT_PUBLIC_* configuration values; the reviewed code does not show arbitrary environment values being collected.
- The traced telemetry endpoint belongs to WalletConnect, which this wallet widget integrates.
Behavioral surface
ChildProcessCryptoEnvironmentVarsNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/core-CHgHoX6U.mjsView file
103WC_NAME_SUFFIX_LEGACY: ".wcn.id",
L104: BLOCKCHAIN_API_RPC_URL: "https://rpc.walletconnect.org",
L105: PULSE_API_URL: "https://pulse.walletconnect.org",
...
L159: UNSUPPORTED_NETWORK_NAME: "Unknown Network",
L160: SECURE_SITE_SDK_ORIGIN: (typeof process < "u" && typeof process.env < "u" ? process.env.NEXT_PUBLIC_SECURE_SITE_ORIGIN : void 0) || "https://secure.walletconnect.org"
L161: }, hl = {
...
L842: const e = _e({
L843: data: Array.from([]),
L844: has(s) {
...
L1019: if (t)
L1020: return JSON.parse(t);
L1021: } catch {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/core-CHgHoX6U.mjsView on unpkg · L1038682ends Ch {
constructor(e, s, r = !0) {
super(e, s, r), this.core = e, this.logger = s, Me(this, "context", Hm), Me(this, "storagePrefix", Gt), Me(this, "storageVersion", zm), Me(this, "events", /* @__PURE__ */ new Map()), Me(this, "shouldPersist
Medium
Ai Review Evidence
WalletConnect’s event client enables telemetry by default when no setting is supplied.
dist/core-CHgHoX6U.mjsView on unpkg · L8682dist/multichain-widget.umd.jsView file
Findings
2 Critical2 High5 Medium3 Low
CriticalCredential Exfiltrationdist/core-CHgHoX6U.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/multichain-widget.umd.js
HighTrigger Reachable Credential Exfiltrationdist/multichain-widget.umd.js
HighSemantic Analysis Limiteddist/index.es-J0awkSL0.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/multichain-widget.umd.js
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/core-CHgHoX6U.mjs
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @upcoming/multichain-widget@0.12.2.
See all versions of @upcoming/multichain-widget for other recorded verdicts.
- Review the evidence and your use of @upcoming/multichain-widget@0.12.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.