registry / @3dverse/livelink-agent / 0.5.3

@3dverse/livelink-agent@0.5.3

Headless agent package for controlling 3dverse rendering sessions programmatically (Node.js and browser compatible)

AI Security Review

scanned 21d ago · by lpm-firewall-ai

A session join fetches unpinned JavaScript from the vendor CDN and executes it. A CDN response compromise can execute code in the consuming Node or browser process.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Application code calls the session join API.

Impact

Remote code execution in the application process.

Mechanism

Remote JavaScript fetch followed by VM or dynamic import execution.

Attack narrative

When an application joins a Livelink session, the package calls its core loader. In Node it fetches a CDN-hosted module as text and evaluates it through SourceTextModule; otherwise it imports a base64 data URL. The downloaded code is not bundled or integrity-pinned, so a malicious response from that endpoint executes with the application's privileges.

AI rationale

The package contains a reachable remote-code execution path: it downloads and evaluates JavaScript at runtime. The absence of install hooks reduces install-time risk but does not remove this runtime supply-chain attack surface.

Evidence

dist/index.cjs

Network endpoints1

cdn.3dverse.com/livelink/core/1.0/

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.

@3dverse/livelink-agent@0.5.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code