stream-chat@9.54.4
JS SDK for the Stream Chat API
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package’s install scripts do not show an attack, and insight reporting is disabled by default. When explicitly enabled, though, the telemetry sends the chat token and user details to an analytics endpoint without source evidence describing that collection, warranting a warning.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The application sets enableInsights to true and a websocket connection fails or recovers after failures.
Impact
Sensitive session and user information is disclosed to the SDK vendor’s analytics service; the option is opt-in, but the inspected source does not describe the data collected.
Mechanism
The SDK posts insight objects containing the chat token, user details, device data and websocket details to its insights endpoint.
AI rationale
The package’s install scripts do not show an attack, and insight reporting is disabled by default. When explicitly enabled, though, the telemetry sends the chat token and user details to an analytics endpoint without source evidence describing that collection, warranting a warning.
Evidence
src/client.tssrc/connection.tssrc/insights.tspackage.json
Network endpoints1
chat-insights.getstream.io
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- When enabled, websocket failure and recovery paths submit insight reports.
- The report includes the chat token, user details, device data and websocket details.
- Reports are sent to chat-insights.getstream.io.
Evidence against
- Insight reporting is gated by the opt-in enableInsights option, which is not enabled in the constructor defaults.
- The reporting endpoint is a GetStream-owned host, and the package postinstall only imports its Husky setup script if that file exists.
Behavioral surface
CryptoEnvironmentVarsNetworkWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.postinstall = node -e "require('fs').existsSync('scripts/install-husky.mjs') && import('./scripts/install-husky.mjs')"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "require('fs').existsSync('scripts/install-husky.mjs') && import('./scripts/install-husky.mjs')"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgsrc/connection.tsView file
341if (response) {
this.connectionID = response.connection_id;
if (
this.client.insightMetrics.wsConsecutiveFailures > 0 &&
this.client.options.enableInsights
) {
postInsights(
'ws_success_after_failure',
[redacted](this as unknown as StableWSConnection),
);
this.client.insightMetrics.wsConsecutiveFailure
Findings
1 Critical1 High5 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencesrc/connection.ts
MediumAi Review Evidencesrc/insights.ts
MediumAi Review Evidencesrc/insights.ts
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to stream-chat@9.54.4.
See all versions of stream-chat for other recorded verdicts.
- Review the evidence and your use of stream-chat@9.54.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.