arcy.js@0.1.8
ARCY — the universal JavaScript utility for embedding an AI agent that talks to, learns from, and acts on behalf of your users.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe inspected behavior matches the browser widget’s functionality, and the scanner signals resolve to ordinary API requests and input-type handling. No concrete malicious chain or unresolved warning-worthy behavior was found.
Static reason
One or more suspicious static signals were detected.
Trigger
The caller initializes the widget with a token and invokes its browser features.
Impact
No malicious execution, credential theft, or foreign agent configuration mutation was established.
Mechanism
The widget sends session and chat requests to its service, omits ambient credentials, and checks consent for telemetry capture.
AI rationale
The inspected behavior matches the browser widget’s functionality, and the scanner signals resolve to ordinary API requests and input-type handling. No concrete malicious chain or unresolved warning-worthy behavior was found.
Network endpoints2
api.arcyai.comcdn.arcyai.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has only a publication-time build hook, with no registry-install hooks or runtime self-dependency.
- dist/index.js requires a caller-supplied token to initialize the widget.
- Session requests default to api.arcyai.com and omit ambient credentials.
- Telemetry capture checks consent before collecting events.
- The flagged password text in dist/control-resolver.cjs maps browser input types, rather than embedding a secret.
- dist/chat-LNZKEWPG.js sends widget queries through the agent API.
Evidence against
Behavioral surface
Network
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/control-resolver.cjsView file
128patternName = generic_password
severity = medium
line = 128
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/control-resolver.cjsView on unpkg · L128dist/chunk-TSOOGCIS.jsView file
234patternName = generic_password
severity = medium
line = 234
Medium
Secret Pattern
Hardcoded password in dist/chunk-TSOOGCIS.js
dist/chunk-TSOOGCIS.jsView on unpkg · L234package.jsonView file
57"typecheck": "tsc --noEmit",
"prepublishOnly": "pnpm build"
},
"devDependencies": {
"@workspace/eslint-config": "workspace:*",
"@workspace/typescript-config": "workspace:*",
Findings
3 Medium9 Low
MediumSecret Patterndist/control-resolver.cjs
MediumNetwork
MediumSecret Patterndist/chunk-TSOOGCIS.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to arcy.js@0.1.8.
See all versions of arcy.js for other recorded verdicts.
- Review the evidence and your use of arcy.js@0.1.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.