stream-chat@9.54.3
JS SDK for the Stream Chat API
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe connection diagnostics are opt-in, but their payload includes the user token and other identifying details and the option declaration does not disclose those fields. This is a real sensitive-data risk, though the code gates transmission on enableInsights rather than sending it by default.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A WebSocket connection failure when the client is configured with enableInsights: true.
Impact
Sensitive credentials and user information are disclosed to the insights endpoint; the option’s declaration does not explain the payload contents.
Mechanism
The failure handler builds an insight payload containing the API key, user token, user details and connection data, then posts it to the insights service.
AI rationale
The connection diagnostics are opt-in, but their payload includes the user token and other identifying details and the option declaration does not disclose those fields. This is a real sensitive-data risk, though the code gates transmission on enableInsights rather than sending it by default.
Evidence
src/connection.tssrc/insights.tssrc/types.ts
Network endpoints1
chat-insights.getstream.io/insights/<type>
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- When enableInsights is enabled, a failed WebSocket connection triggers an insights submission.
- The insights payload includes the API key and user token, along with user and connection details.
- The insights are posted to https://chat-insights.getstream.io/insights/<type>.
- The insight option is opt-in, but its type declaration does not describe the sensitive fields sent.
Evidence against
- The manifest’s postinstall only conditionally imports scripts/install-husky.mjs; that file is absent from the package snapshot, which lists only dist and src.
- The connection failure path gates insight submission on enableInsights.
Behavioral surface
CryptoEnvironmentVarsNetworkWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.postinstall = node -e "require('fs').existsSync('scripts/install-husky.mjs') && import('./scripts/install-husky.mjs')"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "require('fs').existsSync('scripts/install-husky.mjs') && import('./scripts/install-husky.mjs')"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsrc/connection.tsView file
356} catch (error: any) {
this.isConnecting = false;
this._log(`_connect() - Error - `, error);
if (this.client.options.enableInsights) {
this.client.insightMetrics.wsConsecutiveFailures++;
this.client.insightMetrics.wsTotalFailures++;
const insights = buildWsFatalI
Medium
Findings
1 Critical1 High5 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencesrc/connection.ts
MediumAi Review Evidencesrc/insights.ts
MediumAi Review Evidencesrc/insights.ts
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to stream-chat@9.54.3.
See all versions of stream-chat for other recorded verdicts.
- Review the evidence and your use of stream-chat@9.54.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.