registry / @dvmkit/dvm-cli / 0.11.1
@dvmkit/dvm-cli@0.11.1
⚠ Under reviewCommand-line client and agent skill for Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected reporting flow uses platform URL and token configuration for service reports, while the available excerpts do not resolve the alleged wallet sweep or credential redirection behavior. Because those potentially consequential bundled paths remain unverified, manual review is warranted without treating scanner labels as proof of an attack.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the CLI or starts a configured DVM service.
Impact
The reviewed excerpts do not establish unauthorized transfers or credential disclosure.
Mechanism
Platform reports use configured service credentials; the suspected wallet and credential paths require further source tracing.
AI rationale
The inspected reporting flow uses platform URL and token configuration for service reports, while the available excerpts do not resolve the alleged wallet sweep or credential redirection behavior. Because those potentially consequential bundled paths remain unverified, manual review is warranted without treating scanner labels as proof of an attack.
Network endpoints1
api.dvmkit.dev
Decision evidence
public snapshotAI called this Manual Review at 58.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The CLI reporting code sends platform tokens to configured platform URLs for service reports.
- The DVM server uses explicit platform URL and token configuration to activate its revenue reporter.
- The inspected WebSocket code sets standard protocol and origin headers from connection options.
Evidence against
- The source inspected here does not resolve the scanner’s allegations of a fixed-recipient wallet transfer or credential redirection; those bundled code paths need further review.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggeddist/chunk-MBSCP52L.jsView file
12$ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunk-MBSCP52L.jsView on unpkg · L1212$ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Critical
Wallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/chunk-MBSCP52L.jsView on unpkg · L1212Trigger-reachable chain: manifest.bin -> dist/dvm.js -> dist/chunk-MBSCP52L.js
L12: $ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Findings
4 Critical6 High3 Medium5 Low
CriticalCredential Exfiltrationdist/chunk-MBSCP52L.js
CriticalWallet Draindist/chunk-MBSCP52L.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-MBSCP52L.js
CriticalPrevious Version Dangerous Deltadist/dvm.js
HighFixed Recipient Near Full Balance Transferdist/chunk-MBSCP52L.js
HighCredential Redirect Persistencedist/chunk-MBSCP52L.js
HighCommand Output Exfiltrationdist/dvm.js
HighCross File Remote Execution Contextdist/dvm.js
HighTrigger Reachable Credential Exfiltrationdist/chunk-MBSCP52L.js
HighSemantic Analysis Limiteddist/chunk-X7SEGALJ.js#virtual:normalized:round1
MediumNetwork
Affected versions and remediation
This report applies to @dvmkit/dvm-cli@0.11.1.
See all versions of @dvmkit/dvm-cli for other recorded verdicts.
- Review the evidence and your use of @dvmkit/dvm-cli@0.11.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.