registry / @dvmkit/dvm-cli / 0.11.2
@dvmkit/dvm-cli@0.11.2
⚠ Under reviewCommand-line client and agent skill for Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe manifest and inspected reporting code do not establish malicious behavior, and the scanner labels alone are not proof. The reachable wallet bundle uses private keys, but the excerpts inspected do not resolve its payment destinations and callers, so the source review cannot determine whether the reported transfer behavior is ordinary user-directed payment or an attack.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Running the CLI and invoking wallet or payment functionality.
Impact
Potentially significant wallet impact remains unresolved because the relevant transfer callers and destinations were not fully traced.
Mechanism
The runtime bundle creates wallet clients from configured keys and RPC endpoints; the reviewed excerpts do not establish whether any transfer is automatically redirected.
AI rationale
The manifest and inspected reporting code do not establish malicious behavior, and the scanner labels alone are not proof. The reachable wallet bundle uses private keys, but the excerpts inspected do not resolve its payment destinations and callers, so the source review cannot determine whether the reported transfer behavior is ordinary user-directed payment or an attack.
Decision evidence
public snapshotAI called this Manual Review at 54.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes a CLI entrypoint and declares no lifecycle scripts.
- The CLI imports the large wallet and payment bundle at runtime.
- The bundle reads an EVM private key from wallet configuration and uses configured RPC and wallet clients; the inspected excerpts do not resolve all payment destinations and callers.
- The reporting helpers send payloads to internal platform routes using the platform token.
Evidence against
- The inspected reporting helpers use the configured platform URL and platform token, which is consistent with platform reporting.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggeddist/chunk-MBSCP52L.jsView file
12$ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunk-MBSCP52L.jsView on unpkg · L1212$ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Critical
Wallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/chunk-MBSCP52L.jsView on unpkg · L1212Trigger-reachable chain: manifest.bin -> dist/dvm.js -> dist/chunk-MBSCP52L.js
L12: $ZodArray,
L13: $ZodBase64,
L14: $ZodBase64URL,
...
L293: initCallerLoggers,
L294: isValidEvmPrivateKey,
L295: kdfInputToBytes,
...
L408: var cwd = null;
L409: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L410: process.cwd = function() {
...
L415: try {
L416: process.cwd();
L417: } catch (er) {
Findings
4 Critical6 High3 Medium5 Low
CriticalCredential Exfiltrationdist/chunk-MBSCP52L.js
CriticalWallet Draindist/chunk-MBSCP52L.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-MBSCP52L.js
CriticalPrevious Version Dangerous Deltadist/dvm.js
HighFixed Recipient Near Full Balance Transferdist/chunk-MBSCP52L.js
HighCredential Redirect Persistencedist/chunk-MBSCP52L.js
HighCommand Output Exfiltrationdist/dvm.js
HighCross File Remote Execution Contextdist/dvm.js
HighTrigger Reachable Credential Exfiltrationdist/chunk-MBSCP52L.js
HighSemantic Analysis Limiteddist/chunk-X7SEGALJ.js#virtual:normalized:round1
MediumNetwork
Affected versions and remediation
This report applies to @dvmkit/dvm-cli@0.11.2.
See all versions of @dvmkit/dvm-cli for other recorded verdicts.
- Review the evidence and your use of @dvmkit/dvm-cli@0.11.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.