Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@3dverse/livelink-agent@0.5.4: Suspicious npm security report | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 12 finding(s) warrant review before installing.

View on npm All versions

registry / @3dverse/livelink-agent / 0.5.4

@3dverse/livelink-agent@0.5.4

Headless agent package for controlling 3dverse rendering sessions programmatically (Node.js and browser compatible)

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Joining a Livelink session fetches a mutable remote module and executes it. A CDN compromise or substituted response can run code in the consumer's runtime.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A caller invokes a session join, start, or agent workflow that joins a session.

Impact

Remote code can execute with the permissions of the application using this package.

Mechanism

Remote module fetch followed by dynamic module evaluation.

AI rationale

The package has no install lifecycle hook, but a user-triggered session join retrieves and executes unpinned remote JavaScript. That is a concrete remote-code-execution risk requiring a warning.

Evidence

package.jsondist/index.cjs

Network endpoints1

cdn.3dverse.com/livelink/core/1.0/

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

The runtime fetches a core module from the vendor CDN without an integrity check.
Fetched CDN text is evaluated as a JavaScript module.

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

This path runs when a caller joins a rendering session.

Evidence against

The manifest has no preinstall, install, or postinstall hook.
The remote-loading path is reached by explicit session operations, not package installation.
No source evidence shows credential harvesting, local writes, or child-process execution.

Behavioral surface

Source

ChildProcessDynamicRequireEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 583 KB of source, external domains: cdn.3dverse.com, opcfoundation.org

Source & flagged code

4 flagged · loading source

dist/index.cjsView file

2394static async #i(o) { L2395: let r = "https://cdn.3dverse.com/livelink/core/1.0/" + (o !== "prod" ? `core.${o}.mjs` : "core.mjs"); L2396: if (!a) return new Function("return import('" + r + "')"); L2397: let t = await (await fetch(r)).text(), d = await new Function("return import('node:vm')")(); L2398: return d.SourceTextModule ? (console.info("Using experimental VM SourceTextModule to load Livelink core"), async () => { ... L2401: }), await n.evaluate(), n.namespace; L2402: }) : new Function("return import('data:text/javascript;base64," + btoa(t) + "')"); L2403: } ... L4460: * Apply component values to the storage core without marking anything dirty or dispatching an L4461: * event. Private (non-virtual) so it is safe to call from the constructor. L4462: */ ... L8552: const id = Str

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.cjsView on unpkg · L2394

•Trigger-reachable chain: manifest.main -> dist/index.cjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg

2395let r = "https://cdn.3dverse.com/livelink/core/1.0/" + (o !== "prod" ? `core.${o}.mjs` : "core.mjs"); L2396: if (!a) return new Function("return import('" + r + "')"); L2397: let t = await (await fetch(r)).text(), d = await new Function("return import('node:vm')")();

High

Eval

Package source references dynamic code evaluation.

dist/index.cjsView on unpkg · L2395

8var __name = (target, value) => __defProp(target, "name", { value, configurable: true }); L9: var __commonJS = (cb, mod) => function __require() { L10: try {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.cjsView on unpkg · L8

Findings

2 Critical2 High3 Medium5 Low

CriticalRemote Asset Decode Executedist/index.cjs

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

HighChild Process

HighEvaldist/index.cjs

MediumDynamic Requiredist/index.cjs

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @3dverse/livelink-agent@0.5.4.

See version security history for other recorded verdicts.

Review the evidence and your use of @3dverse/livelink-agent@0.5.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-28 23:01:00.346Z (UTC).

93%Suspicious

AI assessment confidence

IntentCritical Vulnerability

TypeRemote Code Execution

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

Maintainersh-eal, apetitescure

Version0.5.4

Latest on npm0.5.9

PublishedAug 28, 2026

Licensenone

Dependencies6

Integrityverified

Package size457 KB

Files106

Runtime surface

package.json

Entrypointsmain → ./dist/index.cjsmodule → ./dist/index.mjstypes → ./dist/livelink.agent/sources/index.d.tsexports map

RuntimeNo engine / OS / CPU constraints

Artifact2.05 MB · 106 files1 signature(s)

Install lifecycleNo install hooks · other: build, clean, clean:docs, dev +8

Behavioral surface

ChildProcessDynamicRequireEvalFilesystemNetworkHighEntropyStringsUrlStringsNoLicense

LPM.dev Registry

© 2026 LPM

Source & flagged code

4 flagged

dist/index.cjsView file

Lines 1-28javascript

1"use strict";

2var __create = Object.create;

3var __defProp = Object.defineProperty;

4var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

5var __getOwnPropNames = Object.getOwnPropertyNames;

6var __getProtoOf = Object.getPrototypeOf;

7var __hasOwnProp = Object.prototype.hasOwnProperty;

8var __name = (target, value) => __defProp(target, "name", { value, configurable: true });

9var __commonJS = (cb, mod) => function __require() {

10 try {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.cjsView on unpkg · L8

11 return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

12 } catch (e2) {

13 throw mod = 0, e2;

14 }

15};

16var __export = (target, all) => {

17 for (var name in all)

18 __defProp(target, name, { get: all[name], enumerable: true });

19};

20var __copyProps = (to, from, except, desc) => {

21 if (from && typeof from === "object" || typeof from === "function") {

22 for (let key of __getOwnPropNames(from))

23 if (!__hasOwnProp.call(to, key) && key !== except)

24 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

25 }

26 return to;

27};

28var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

Lines 2374-2415javascript

2374var a = typeof process < "u" && process.versions != null && process.versions.node != null;

2375var s = class

•Trigger-reachable chain: manifest.main -> dist/index.cjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg

e

{

2376 static {

2377 __name(this, "e");

2378 }

2379 static #e = null;

2380 static #o = null;

2381 static get Core() {

2382 if (!e.#e) throw new Error("Livelink core not initialized");

2383 return e.#e;

2384 }

2385 static load(o = "prod") {

2386 return e.#o || (e.#o = e.#r(o)), e.#o;

2387 }

2388 static async #r(o) {

2389 let r = await e.#i(o), { LivelinkCore: i } = await r();

2390 e.#e = i;

2391 let t = { prod: "#FFC700", dev: "#36D399", debug: "#FB4949" };

2392 console.info(`%c Livelink Core initialized \u{1F680} %c ${i.VERSION} %c ${i.COMMIT_SHA} %c${o}`, "background: #080A12; color: #FFC700; font-weight: bold; padding: 8px; padding-right: 164px; border-radius: 16px; margin: 16px 0 16px 0", "background: #9EA6D6; color: #0A1018; font-weight: bold; padding: 1px; padding-right: 0px; margin-left: -160px; border-radius: 16px 0 0 16px;", "background: #6973A8; color: #0A1018; font-weight: bold; padding: 1px; padding-left: 0; border-radius: 0 16px 16px 0;", `background: ${t[o]}; color: #000; font-weight: bold; padding: 6px 16px; border: 4px solid #080A1 ...

2393 }

2394 static async #i(o) {

2395 let r = "https://cdn.3dverse.com/livelink/core/1.0/" + (o !== "prod" ? `core.${o}.mjs` : "core.mjs");

2396 if (!a) return new Function("return import('" + r + "')");

2397 let t = await (await fetch(r)).text(), d = await new Function("return import('node:vm')")();

High

Eval

Package source references dynamic code evaluation.

dist/index.cjsView on unpkg · L2395

2398 return d.SourceTextModule ? (console.info("Using experimental VM SourceTextModule to load Livelink core"), async () => {

2399 let n = new d.SourceTextModule(t, { identifier: r });

2400 return await n.link(() => {

2401 }), await n.evaluate(), n.namespace;

2402 }) : new Function("return import('data:text/javascript;base64," + btoa(t) + "')");

2403 }

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.cjsView on unpkg · L2394

2404 constructor() {

2405 }

2406};

2407typeof window < "u" && (window.__LIVELINK__ || (window.__LIVELINK__ = {}), Object.prototype.hasOwnProperty.call(window.__LIVELINK__, "@3dverse/livelink.core") ? console.warn("\u26A0\uFE0F WARNING \u26A0\uFE0F Multiple instances of Livelink Core being imported.") : window.__LIVELINK__["@3dverse/livelink.core"] = "1.1.14");

2408

2409// ../livelink.base/sources/config/api.ts

2410var api_url = `https://${"api.3dverse.com"}/app/v1`;

2411function getApiUrl() {

2412 return api_url;

2413}

2414__name(getApiUrl, "getApiUrl");

2415function setApiUrl(url) {

Long lines were clipped for display.