@zerohash-sdk/csp-fiat-withdrawals-react@0.13.4
A React SDK for embedding the Zerohash CSP Fiat Withdrawals flow into web applications. Lets users withdraw fiat (USD) from their account to a linked bank account via ACH.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe manifest has no install hooks, and the active React entrypoint loads the package-aligned Zerohash withdrawals component. Its failure reporter sends diagnostic context to matching Zerohash collector hosts; no concrete attack behavior was established.
Decision evidence
public snapshot- The manifest exposes a React module entrypoint and has no install lifecycle hook.
- The component loads its matching Zerohash withdrawals web component from Zerohash CDN environments.
- Failure reporting posts diagnostic details to configured Zerohash Faro collector endpoints; no credential harvesting or unrelated recipient was identified.
Source & flagged code
4 flaggedThe manifest exposes a React module entrypoint and has no install lifecycle hook.
package.jsonView on unpkg · L5The component loads its matching Zerohash withdrawals web component from Zerohash CDN environments.
dist/index.jsView on unpkg · L233Findings
Affected versions and remediation
This report applies to @zerohash-sdk/csp-fiat-withdrawals-react@0.13.4.
See all versions of @zerohash-sdk/csp-fiat-withdrawals-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/csp-fiat-withdrawals-react@0.13.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.