registry / @upcoming/multichain-widget / 0.13.3
@upcoming/multichain-widget@0.13.3
``` npm install @upcoming/multichain-widget ```
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest exposes built widget bundles and declares no install hooks. Although a bundled chunk reads RAINBOW_PROVIDER_API_KEY, the source uses it as an API key for enhanced-provider.rainbow.me, which matches the Rainbow provider integration and does not establish credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The client is initialized when its bundled module is evaluated; provider requests occur when the relevant Rainbow functionality is used.
Impact
The inspected source shows a credential directed to its corresponding provider service, with no evidence of unrelated collection or malicious behavior.
Mechanism
The RAINBOW_PROVIDER_API_KEY value, or a bundled fallback key, is configured as an x-api-key for enhanced-provider.rainbow.me.
AI rationale
The manifest exposes built widget bundles and declares no install hooks. Although a bundled chunk reads RAINBOW_PROVIDER_API_KEY, the source uses it as an API key for enhanced-provider.rainbow.me, which matches the Rainbow provider integration and does not establish credential exfiltration.
Network endpoints1
enhanced-provider.rainbow.me
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle scripts; it exposes bundled widget entry points.
- The flagged environment variable is specifically RAINBOW_PROVIDER_API_KEY and is used as an x-api-key for enhanced-provider.rainbow.me, Rainbow's provider endpoint.
- The source initializes a Rainbow fetch client; the inspected code does not show this value being sent to an unrelated host.
Evidence against
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/index.es-BgSZaIrD.mjsView file
•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.es-BgSZaIrD.mjsView on unpkg1180async function df({ hash: r, signature: e }) {
L1181: const t = _i(r) ? r : Bn(r), { secp256k1: i } = await import("./secp256k1-C5_HGjGu.mjs");
L1182: return `0x${(() => {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.es-BgSZaIrD.mjsView on unpkg · L1180dist/index-C3-04IsQ.mjsView file
78function KI() {
L79: return Y6 || (Y6 = 1, process.env.NODE_ENV !== "production" && (function() {
L80: function e(_) {
...
L170: G || (G = !0, console.error(
L171: "%s: `key` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you should pass it as a di...
L172: re
...
L358: fonts: {
L359: body: JI[t]
L360: },
...
L3024: let n = Jt(e);
L3025: return t.size && (Nn(n, { size: t.size }), n = Ut(n, { dir: "right" })), new TextDecoder().decode(n);
L3026: }
Findings
2 Critical2 High5 Medium4 Low
CriticalCredential Exfiltrationdist/index-C3-04IsQ.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/multichain-widget.umd.js
HighTrigger Reachable Credential Exfiltrationdist/multichain-widget.umd.js
HighSemantic Analysis Limiteddist/index.es-BgSZaIrD.mjs
MediumDynamic Requiredist/index.es-BgSZaIrD.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/multichain-widget.umd.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @upcoming/multichain-widget@0.13.3.
See all versions of @upcoming/multichain-widget for other recorded verdicts.
- Review the evidence and your use of @upcoming/multichain-widget@0.13.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.