@yieldfabric/wallet@0.2.0
Reusable YieldFabric wallet — login, signing, profile, and key management
AI Security Review
scanned 2d ago · by lpm-firewall-aiREADME.md attempts to impose publisher approval and restrict the security review to visual inspection, which is review-directed manipulation. The inspected manifest and runtime excerpts do not establish an install-time attack or credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A reviewer reads README.md during package inspection.
Impact
This attempts to limit source analysis and suppress findings; no runtime attack was identified in the inspected code.
Mechanism
The README says review requires publisher authorization and permits visual inspection only.
Attack narrative
The README instructs reviewers to obtain publisher authorization and limits review to visual inspection. This review-directed restriction is evidence of malicious intent under the package review rules; no runtime credential exfiltration was established in the inspected flows.
AI rationale
README.md attempts to impose publisher approval and restrict the security review to visual inspection, which is review-directed manipulation. The inspected manifest and runtime excerpts do not establish an install-time attack or credential exfiltration.
Evidence
README.md
Decision evidence
public snapshotAI called this Malicious at 91.0% confidence as Malware with low false-positive risk.
Evidence for block
- README.md tells reviewers that source review requires publisher authorization and limits review access to visual inspection only, attempting to restrict this security review.
Evidence against
- The manifest’s only lifecycle script is prepublishOnly, which cleans and builds the package; it is not an install hook.
- The inspected runtime configuration uses REACT_APP_* service URLs with localhost defaults, and its auth helper attaches tokens to requests for those services.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
4 flaggeddist/index.jsView file
355if (!segment) return null;
L356: const base64 = segment.replace(/-/g, "+").replace(/_/g, "/");
L357: const padded = base64 + "=".repeat((4 - base64.length % 4) % 4);
...
L895: } catch (error) {
L896: console.warn("Failed to validate delegation session metadata:", error);
L897: this.clearDelegationToken();
...
L1393: function envPaymentsUrls() {
L1394: const raw = process.env.REACT_APP_PAYMENTS_URLS;
L1395: if (!raw) return void 0;
...
L1613: this.refreshToken = null;
L1614: this.baseUrl = process.env.REACT_APP_AUTH_SERVICE_URL || "http://localhost:3000";
L1615: this.loadTokensFromStorage();
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L355dist/index.cjsView file
363Trigger-reachable chain: manifest.main -> dist/index.cjs
L363: if (!segment) return null;
L364: const base64 = segment.replace(/-/g, "+").replace(/_/g, "/");
L365: const padded = base64 + "=".repeat((4 - base64.length % 4) % 4);
...
L903: } catch (error) {
L904: console.warn("Failed to validate delegation session metadata:", error);
L905: this.clearDelegationToken();
...
L1401: function envPaymentsUrls() {
L1402: const raw = process.env.REACT_APP_PAYMENTS_URLS;
L1403: if (!raw) return void 0;
...
L1621: this.refreshToken = null;
L1622: this.baseUrl = process.env.REACT_APP_AUTH_SERVICE_URL || "http://localhost:3000";
L1623: this.loadTokensFromStorage();
Findings
2 Critical2 High3 Medium6 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @yieldfabric/wallet@0.2.0.
See all versions of @yieldfabric/wallet for other recorded verdicts.
- Avoid installing @yieldfabric/wallet@0.2.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.