registry / @dvmkit/dvm-cli / 0.10.0
@dvmkit/dvm-cli@0.10.0
Command-line client and agent skill for Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe manifest has no install hook, and inspected wallet code uses credentials in the context of CLI payment and refund operations. Scanner claims of a fixed-recipient drain and credential redirection were not corroborated by the inspected source.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI's wallet or payment commands.
Impact
No unrequested transfer or credential disclosure was established.
Mechanism
The CLI reads configured wallet credentials for signing and provides refund flows that use the connected wallet or a user-supplied address.
AI rationale
The manifest has no install hook, and inspected wallet code uses credentials in the context of CLI payment and refund operations. Scanner claims of a fixed-recipient drain and credential redirection were not corroborated by the inspected source.
Decision evidence
public snapshotAI called this Clean at 78.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and declares no install lifecycle hook.
- The CLI uses configured wallet credentials for wallet operations; inspected source describes refunds to the connected wallet or an address explicitly supplied by the user.
- The inspected dependency snapshots expose package-aligned Cashu, DVM SDK, and x402 functionality; no malicious behavior was established in the cited entry excerpts.
- The DVM skill describes finding and paying for services at the user's request.
Evidence against
- Scanner labels alleged a fixed-recipient wallet drain and credential redirection, but inspected source showed no such transfer or gateway path; those labels alone do not establish an attack.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggeddist/chunk-CWWZM4M6.jsView file
12$ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunk-CWWZM4M6.jsView on unpkg · L1212$ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Critical
Wallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/chunk-CWWZM4M6.jsView on unpkg · L1212Trigger-reachable chain: manifest.bin -> dist/dvm.js -> dist/chunk-CWWZM4M6.js
L12: $ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Findings
4 Critical5 High3 Medium5 Low
CriticalCredential Exfiltrationdist/chunk-CWWZM4M6.js
CriticalWallet Draindist/chunk-CWWZM4M6.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-CWWZM4M6.js
CriticalPrevious Version Dangerous Deltadist/dvm.js
HighFixed Recipient Near Full Balance Transferdist/chunk-CWWZM4M6.js
HighCredential Redirect Persistencedist/chunk-CWWZM4M6.js
HighCross File Remote Execution Contextdist/dvm.js
HighTrigger Reachable Credential Exfiltrationdist/chunk-CWWZM4M6.js
HighSemantic Analysis Limiteddist/chunk-X7SEGALJ.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @dvmkit/dvm-cli@0.10.0.
See all versions of @dvmkit/dvm-cli for other recorded verdicts.
- Review the evidence and your use of @dvmkit/dvm-cli@0.10.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.