arcy.js@0.2.3
ARCY, the universal JavaScript utility for embedding an AI agent that talks to, learns from, and acts on behalf of your users.
AI Security Review
scanned 28d ago · by lpm-firewall-aiSource inspection found package-aligned session and flow requests, with no evidence of an install-time attack or unrelated credential exfiltration. The static callback and secret-pattern signals were not substantiated by inspected source.
Static reason
One or more suspicious static signals were detected.
Trigger
A consumer imports and uses session or flow functionality.
Impact
The package service receives the session initialization data expected by this client; no unrelated credential collection or foreign project mutation was established.
Mechanism
The session client posts its caller-provided token and session payload to its configured API base, defaulting to the package service, while omitting browser credentials.
AI rationale
Source inspection found package-aligned session and flow requests, with no evidence of an install-time attack or unrelated credential exfiltration. The static callback and secret-pattern signals were not substantiated by inspected source.
Network endpoints1
api.arcyai.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only install-adjacent hook is prepublishOnly, which runs the package build.
- The session bootstrap uses a caller-provided token and configurable API base, then sends a JSON POST with credentials omitted.
- The flow API default points to the package's own service; the flagged chunk is ordinary control and DOM-action code.
Evidence against
Behavioral surface
Network
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flaggeddist/chunk-NKFEZTTN.jsView file
261patternName = generic_password
severity = medium
line = 261
Medium
dist/index.cjsView file
•Trigger-reachable fixed external POST callback chain: manifest.main -> dist/index.cjs
/* arcy.js — https://arcyai.com */
method: "POST",
body: JSON.stringify(sessionId ? { sessionId } : {}),
method: "POST",
body: JSON.stringify(sessionId ? { sessionId } : {}),
async function postFlowAnswer(flowCvid, body, options) {
method: "POST",
body: JSON.stringify({ ...body, ...sessionId ? { sessionId } : {} }),
High
Trigger Reachable External Post Callback
A manifest entrypoint or package-local install chain reaches a fixed external POST callback.
dist/index.cjsView on unpkg20209function createSessionBootstrap(options) {
const {
token,
apiBase = DEFAULT_API_BASE2,
setTimeoutImpl = (fn, ms) => setTimeout(fn, ms),
now = () => Date.now(),
ret
Findings
1 High3 Medium8 Low
HighTrigger Reachable External Post Callbackdist/index.cjs
MediumSecret Patterndist/chunk-NKFEZTTN.js
MediumNetwork
MediumSecret Patterndist/control-resolver.cjs
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/index.cjs
LowAi Review Evidencedist/index.cjs
Affected versions and remediation
This report applies to arcy.js@0.2.3.
See all versions of arcy.js for other recorded verdicts.
- Review the evidence and your use of arcy.js@0.2.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.