Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@3dverse/livelink-agent@0.5.5: Suspicious npm security report | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 12 finding(s) warrant review before installing.

View on npm All versions

registry / @3dverse/livelink-agent / 0.5.5

@3dverse/livelink-agent@0.5.5

Headless agent package for controlling 3dverse rendering sessions programmatically (Node.js and browser compatible)

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package fetches executable code from a mutable CDN location and evaluates it at runtime. The downloaded code is not pinned or integrity checked.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Calling Agent.start and joining or creating a rendering session.

Impact

A compromise or replacement of the CDN asset can execute arbitrary code in the application process.

Mechanism

Remote module download followed by dynamic evaluation.

AI rationale

The package does not show install-time malware or data theft, but it exposes a reachable unpinned remote-code execution path during normal agent startup. This is a serious dangerous capability rather than sufficient evidence of malicious intent.

Evidence

dist/index.cjs

Network endpoints1

cdn.3dverse.com

Decision evidence

public snapshot

AI called this Suspicious at 95.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The runtime downloads a JavaScript module from the vendor CDN and evaluates it through Node VM or a data URL.
Starting an agent reaches the session join path that loads this remotely supplied core module.

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

Evidence against

There are no npm preinstall, install, or postinstall hooks.
The inspected code contains no credential harvesting, child-process execution, or local file writes.

Behavioral surface

Source

ChildProcessDynamicRequireEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 583 KB of source, external domains: cdn.3dverse.com, opcfoundation.org

Source & flagged code

4 flagged · loading source

dist/index.cjsView file

2394static async #i(o) { L2395: let r = "https://cdn.3dverse.com/livelink/core/1.0/" + (o !== "prod" ? `core.${o}.mjs` : "core.mjs"); L2396: if (!a) return new Function("return import('" + r + "')"); L2397: let t = await (await fetch(r)).text(), d = await new Function("return import('node:vm')")(); L2398: return d.SourceTextModule ? (console.info("Using experimental VM SourceTextModule to load Livelink core"), async () => { ... L2401: }), await n.evaluate(), n.namespace; L2402: }) : new Function("return import('data:text/javascript;base64," + btoa(t) + "')"); L2403: } ... L4460: * Apply component values to the storage core without marking anything dirty or dispatching an L4461: * event. Private (non-virtual) so it is safe to call from the constructor. L4462: */ ... L8552: const id = Str

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.cjsView on unpkg · L2394

•Trigger-reachable chain: manifest.main -> dist/index.cjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg

2395let r = "https://cdn.3dverse.com/livelink/core/1.0/" + (o !== "prod" ? `core.${o}.mjs` : "core.mjs"); L2396: if (!a) return new Function("return import('" + r + "')"); L2397: let t = await (await fetch(r)).text(), d = await new Function("return import('node:vm')")();

High

Eval

Package source references dynamic code evaluation.

dist/index.cjsView on unpkg · L2395

8var __name = (target, value) => __defProp(target, "name", { value, configurable: true }); L9: var __commonJS = (cb, mod) => function __require() { L10: try {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.cjsView on unpkg · L8

Findings

2 Critical2 High3 Medium5 Low

CriticalRemote Asset Decode Executedist/index.cjs

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

HighChild Process

HighEvaldist/index.cjs

MediumDynamic Requiredist/index.cjs

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @3dverse/livelink-agent@0.5.5.

See version security history for other recorded verdicts.

Review the evidence and your use of @3dverse/livelink-agent@0.5.5 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-04 04:36:35.327Z (UTC).

95%Suspicious

AI assessment confidence

IntentDangerous Capability

TypeRemote Code Execution

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

Maintainersh-eal, apetitescure

Version0.5.5

Latest on npm0.5.9

PublishedSep 3, 2026

Licensenone

Dependencies6

Integrityverified

Package size457 KB

Files106

Runtime surface

package.json

Entrypointsmain → ./dist/index.cjsmodule → ./dist/index.mjstypes → ./dist/livelink.agent/sources/index.d.tsexports map

RuntimeNo engine / OS / CPU constraints

Artifact2.05 MB · 106 files1 signature(s)

Install lifecycleNo install hooks · other: build, clean, clean:docs, dev +8

Behavioral surface

ChildProcessDynamicRequireEvalFilesystemNetworkHighEntropyStringsUrlStringsNoLicense

LPM.dev Registry

© 2026 LPM

Source & flagged code

4 flagged

dist/index.cjsView file

Lines 1-28javascript

1"use strict";

2var __create = Object.create;

3var __defProp = Object.defineProperty;

4var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

5var __getOwnPropNames = Object.getOwnPropertyNames;

6var __getProtoOf = Object.getPrototypeOf;

7var __hasOwnProp = Object.prototype.hasOwnProperty;

8var __name = (target, value) => __defProp(target, "name", { value, configurable: true });

9var __commonJS = (cb, mod) => function __require() {

10 try {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.cjsView on unpkg · L8

11 return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

12 } catch (e2) {

13 throw mod = 0, e2;

14 }

15};

16var __export = (target, all) => {

17 for (var name in all)

18 __defProp(target, name, { get: all[name], enumerable: true });

19};

20var __copyProps = (to, from, except, desc) => {

21 if (from && typeof from === "object" || typeof from === "function") {

22 for (let key of __getOwnPropNames(from))

23 if (!__hasOwnProp.call(to, key) && key !== except)

24 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

25 }

26 return to;

27};

28var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

Lines 2374-2415javascript

2374var a = typeof process < "u" && process.versions != null && process.versions.node != null;

2375var s = class

•Trigger-reachable chain: manifest.main -> dist/index.cjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg

e

{

2376 static {

2377 __name(this, "e");

2378 }

2379 static #e = null;

2380 static #o = null;

2381 static get Core() {

2382 if (!e.#e) throw new Error("Livelink core not initialized");

2383 return e.#e;

2384 }

2385 static load(o = "prod") {

2386 return e.#o || (e.#o = e.#r(o)), e.#o;

2387 }

2388 static async #r(o) {

2389 let r = await e.#i(o), { LivelinkCore: i } = await r();

2390 e.#e = i;

2391 let t = { prod: "#FFC700", dev: "#36D399", debug: "#FB4949" };

2392 console.info(`%c Livelink Core initialized \u{1F680} %c ${i.VERSION} %c ${i.COMMIT_SHA} %c${o}`, "background: #080A12; color: #FFC700; font-weight: bold; padding: 8px; padding-right: 164px; border-radius: 16px; margin: 16px 0 16px 0", "background: #9EA6D6; color: #0A1018; font-weight: bold; padding: 1px; padding-right: 0px; margin-left: -160px; border-radius: 16px 0 0 16px;", "background: #6973A8; color: #0A1018; font-weight: bold; padding: 1px; padding-left: 0; border-radius: 0 16px 16px 0;", `background: ${t[o]}; color: #000; font-weight: bold; padding: 6px 16px; border: 4px solid #080A1 ...

2393 }

2394 static async #i(o) {

2395 let r = "https://cdn.3dverse.com/livelink/core/1.0/" + (o !== "prod" ? `core.${o}.mjs` : "core.mjs");

2396 if (!a) return new Function("return import('" + r + "')");

2397 let t = await (await fetch(r)).text(), d = await new Function("return import('node:vm')")();

High

Eval

Package source references dynamic code evaluation.

dist/index.cjsView on unpkg · L2395

2398 return d.SourceTextModule ? (console.info("Using experimental VM SourceTextModule to load Livelink core"), async () => {

2399 let n = new d.SourceTextModule(t, { identifier: r });

2400 return await n.link(() => {

2401 }), await n.evaluate(), n.namespace;

2402 }) : new Function("return import('data:text/javascript;base64," + btoa(t) + "')");

2403 }

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.cjsView on unpkg · L2394

2404 constructor() {

2405 }

2406};

2407typeof window < "u" && (window.__LIVELINK__ || (window.__LIVELINK__ = {}), Object.prototype.hasOwnProperty.call(window.__LIVELINK__, "@3dverse/livelink.core") ? console.warn("\u26A0\uFE0F WARNING \u26A0\uFE0F Multiple instances of Livelink Core being imported.") : window.__LIVELINK__["@3dverse/livelink.core"] = "1.1.14");

2408

2409// ../livelink.base/sources/config/api.ts

2410var api_url = `https://${"api.3dverse.com"}/app/v1`;

2411function getApiUrl() {

2412 return api_url;

2413}

2414__name(getApiUrl, "getApiUrl");

2415function setApiUrl(url) {

Long lines were clipped for display.