registry / @dvmkit/dvm-cli / 0.13.0
@dvmkit/dvm-cli@0.13.0
Command-line client and agent skill for Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package is a CLI for discovering and paying for services, and its wallet reclaim flow directs refunds to the user's wallet or a supported destination. The routed credential and transfer indicators did not establish unauthorized collection or automatic fund movement.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Users invoke the CLI's service, wallet, or credit commands.
Impact
No unauthorized credential transfer or automatic fund transfer was found.
Mechanism
The CLI contacts configured services and its platform endpoint; wallet operations use the user's connected wallet or an explicitly supplied destination.
AI rationale
The package is a CLI for discovering and paying for services, and its wallet reclaim flow directs refunds to the user's wallet or a supported destination. The routed credential and transfer indicators did not establish unauthorized collection or automatic fund movement.
Network endpoints4
api.dvmkit.devapi.coingecko.comrpc.tempo.xyzrpc.moderato.tempo.xyz
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a `dvm` CLI and its scripts are build and check tasks; no install hook is declared.
- The skill describes finding and paying for services within the user's authorization.
- Credit reclaim uses the agent's wallet key or the connected x402 wallet; an EVM refund address is accepted only for supported methods.
- Credit reclaim runs through the `creditDrain` command handler.
- The platform reporter posts to its configured platform URL, which defaults to `api.dvmkit.dev`.
Evidence against
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
14 flaggeddist/chunk-SEJWBDGY.jsView file
53initCallerLoggers,
L54: isValidEvmPrivateKey,
L55: kdfInputToBytes,
...
L168: var cwd = null;
L169: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L170: process.cwd = function() {
...
L175: try {
L176: process.cwd();
L177: } catch (er) {
...
L949: }
L950: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts));
L951: this._timeouts = timeouts;
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunk-SEJWBDGY.jsView on unpkg · L5353initCallerLoggers,
L54: isValidEvmPrivateKey,
L55: kdfInputToBytes,
...
L168: var cwd = null;
L169: var platform = process.env.GRACEFUL_FS_PLATFORM || process.platform;
L170: process.cwd = function() {
...
L175: try {
L176: process.cwd();
L177: } catch (er) {
...
L949: }
L950: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts));
L951: this._timeouts = timeouts;
Critical
Wallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/chunk-SEJWBDGY.jsView on unpkg · L53•matchType = previous_version_dangerous_delta
matchedPackage = @dvmkit/dvm-cli@0.10.0
matchedIdentity = npm:QGR2bWtpdC9kdm0tY2xp:0.10.0
similarity = 0.881
summary = stored previous version shares package body but lacks this dangerous source file
Findings
4 Critical10 High3 Medium5 Low
CriticalCredential Exfiltrationdist/chunk-SEJWBDGY.js
CriticalWallet Draindist/chunk-SEJWBDGY.js
CriticalTrigger Reachable Dangerous Capabilitydist/dvm.js
CriticalPrevious Version Dangerous Deltadist/chunk-SEJWBDGY.js
HighFixed Recipient Near Full Balance Transferdist/dvm.js
HighCredential Redirect Persistencedist/chunk-SEJWBDGY.js
HighCommand Output Exfiltrationdist/dvm.js
HighCross File Remote Execution Contextdist/dvm.js
HighTrigger Reachable Credential Exfiltrationdist/chunk-SEJWBDGY.js
HighSemantic Analysis Limiteddist/chunk-SEJWBDGY.js
HighKnown Malware Source Similaritydist/esm-RQLHAH2K.js
Affected versions and remediation
This report applies to @dvmkit/dvm-cli@0.13.0.
See all versions of @dvmkit/dvm-cli for other recorded verdicts.
- Review the evidence and your use of @dvmkit/dvm-cli@0.13.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.