registry / @dvmkit/dvm-cli / 0.2.0
@dvmkit/dvm-cli@0.2.0
CLI for Digital Vending Machines — discover, pay, and use DVMs from the terminal
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious chain was established, but the package has substantial user-invoked custody and transaction capability. The large bundled source and financial impact leave meaningful risk requiring a warning.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs wallet connection, funding, or withdrawal commands.
Impact
A compromised or unsafe invocation could expose wallet funds or private keys.
Mechanism
Wallet key custody and blockchain transaction submission.
AI rationale
No concrete malicious chain was established, but the package has substantial user-invoked custody and transaction capability. The large bundled source and financial impact leave meaningful risk requiring a warning.
Evidence
dist/dvm.jsdist/chunk-N7MGIK2U.jsdist/chunk-EZHT2RLJ.js
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The executable CLI imports or generates EVM private keys and persists wallet state.
- Bundled code can initiate on-chain withdrawals using the configured wallet.
- The package includes extensive secret and cryptographic handling, creating a high-impact capability if compromised.
Evidence against
- package.json exposes a CLI binary but contains no preinstall, install, or postinstall lifecycle hook.
- The inspected wallet operations are reached through explicit CLI commands; no confirmed secret exfiltration or fixed-recipient transfer was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggeddist/chunk-N7MGIK2U.jsView file
114$ZodArray,
L115: $ZodBase64,
L116: $ZodBase64URL,
...
L411: isCreditPosture,
L412: isValidEvmPrivateKey,
L413: kdfInputToBytes,
...
L643: var POSTGRES_APPLICATION_NAME_MAX_BYTES = 63;
L644: function formatPostgresApplicationName(label, machineId = process.env.FLY_MACHINE_ID) {
L645: const machineSuffix = machineId ? `@${machineId}` : "";
...
L1326: function canonicalRequestPath(pathOrUrl) {
L1327: const parsed = new URL(pathOrUrl, "https://signed-request.invalid");
L1328: return parsed.pathname.startsWith("/") ? parsed.pathname : `/${parsed.pathname}`;
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/chunk-N7MGIK2U.jsView on unpkg · L114114Trigger-reachable credential exfiltration chain: manifest.bin -> dist/dvm.js -> dist/chunk-N7MGIK2U.js
L114: $ZodArray,
L115: $ZodBase64,
L116: $ZodBase64URL,
...
L411: isCreditPosture,
L412: isValidEvmPrivateKey,
L413: kdfInputToBytes,
...
L643: var POSTGRES_APPLICATION_NAME_MAX_BYTES = 63;
L644: function formatPostgresApplicationName(label, machineId = process.env.FLY_MACHINE_ID) {
L645: const machineSuffix = machineId ? `@${machineId}` : "";
...
L1326: function canonicalRequestPath(pathOrUrl) {
L1327: const parsed = new URL(pathOrUrl, "https://signed-request.invalid");
L1328: return parsed.pathname.startsWith("/") ? parsed.pathname : `/${parsed.pathname}`;
High
Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
Findings
4 Critical7 High3 Medium4 Low
CriticalCredential Exfiltrationdist/chunk-N7MGIK2U.js
CriticalWallet Draindist/dvm.js
CriticalTrigger Reachable Dangerous Capabilitydist/dvm.js
CriticalPrevious Version Dangerous Deltadist/dvm.js
HighChild Process
HighFixed Recipient Near Full Balance Transferdist/dvm.js
HighCredential Redirect Persistencedist/dvm.js
HighCommand Output Exfiltrationdist/dvm.js
HighCross File Remote Execution Contextdist/dvm.js
HighTrigger Reachable Credential Exfiltrationdist/chunk-N7MGIK2U.js
HighSemantic Analysis Limiteddist/chunk-EZHT2RLJ.js#virtual:normalized:round1
Medium
Affected versions and remediation
This report applies to @dvmkit/dvm-cli@0.2.0.
See all versions of @dvmkit/dvm-cli for other recorded verdicts.
- Review the evidence and your use of @dvmkit/dvm-cli@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.