@ev-ai/agent-hook@1.1.7: Unknown npm security report (Allow)

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 3 file(s), 268 KB of source, external domains: 169.254.169.254, api.openai.com, cdn.ev-ai.ai, hooks.ev-ai.ai, metadata.google.internal

Source & flagged code

5 flagged

dist/hook.mjsView file

10`).trimEnd();return(0,J.usableCatalogText)(f)}});var be=Ue(m=>{"use strict";Object.defineProperty(m,"__esModule",{value:!0});m.usableCatalogText=m.parseFrontmatterField=m.parseFron... L11: `)}function X(e,t){ba(Mr(e),{recursive:!0});let n=wr(Mr(e),`.${Ma(e)}.${process.pid}.${Pa(4).toString("hex")}.tmp`);try{va(n,t,"utf8");try{Tr(n,e)}catch(r){let o=r instanceof Error... L12: `)}catch(s){let i=s instanceof Error?s.message:String(s);h(`WARN: operator identity cache write failed open: ${i}`)}}function lo(e,t=Date.now()){if(!e)return!0;if(_e(e)?.operator_i...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/hook.mjsView on unpkg · L10

9`):l.join(` L10: `).trimEnd();return(0,J.usableCatalogText)(f)}});var be=Ue(m=>{"use strict";Object.defineProperty(m,"__esModule",{value:!0});m.usableCatalogText=m.parseFrontmatterField=m.parseFron... L11: `)}function X(e,t){ba(Mr(e),{recursive:!0});let n=wr(Mr(e),`.${Ma(e)}.${process.pid}.${Pa(4).toString("hex")}.tmp`);try{va(n,t,"utf8");try{Tr(n,e)}catch(r){let o=r instanceof Error... L12: `)}catch(s){let i=s instanceof Error?s.message:String(s);h(`WARN: operator identity cache write failed open: ${i}`)}}function lo(e,t=Date.now()){if(!e)return!0;if(_e(e)?.operator_i...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/hook.mjsView on unpkg · L9

9`):l.join(` L10: `).trimEnd();return(0,J.usableCatalogText)(f)}});var be=Ue(m=>{"use strict";Object.defineProperty(m,"__esModule",{value:!0});m.usableCatalogText=m.parseFrontmatterField=m.parseFron... L11: `)}function X(e,t){ba(Mr(e),{recursive:!0});let n=wr(Mr(e),`.${Ma(e)}.${process.pid}.${Pa(4).toString("hex")}.tmp`);try{va(n,t,"utf8");try{Tr(n,e)}catch(r){let o=r instanceof Error... L12: `)}catch(s){let i=s instanceof Error?s.message:String(s);h(`WARN: operator identity cache write failed open: ${i}`)}}function lo(e,t=Date.now()){if(!e)return!0;if(_e(e)?.operator_i... ... L15: `,{encoding:"utf8",flag:"wx"})}function Xr(e,t){try{return Sc(e,t),t}catch(n){if(!go(n))throw n;return _e(e)}}function qr(e,t){ln(lt(e),{recursive:!0}),X(e,`${JSON.stringify(t,null... L16: `)}function Zr(e,t)

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/hook.mjsView on unpkg · L9

9`):l.join(` L10: `).trimEnd();return(0,J.usableCatalogText)(f)}});var be=Ue(m=>{"use strict";Object.defineProperty(m,"__esModule",{value:!0});m.usableCatalogText=m.parseFrontmatterField=m.parseFron... L11: `)}function X(e,t){ba(Mr(e),{recursive:!0});let n=wr(Mr(e),`.${Ma(e)}.${process.pid}.${Pa(4).toString("hex")}.tmp`);try{va(n,t,"utf8");try{Tr(n,e)}catch(r){let o=r instanceof Error... L12: `)}catch(s){let i=s instanceof Error?s.message:String(s);h(`WARN: operator identity cache write failed open: ${i}`)}}function lo(e,t=Date.now()){if(!e)return!0;if(_e(e)?.operator_i... ... L15: `,{encoding:"utf8",flag:"wx"})}function Xr(e,t){try{return Sc(e,t),t}catch(n){if(!go(n))throw n;return _e(e)}}function qr(e,t){ln(lt(e),{recursive:!0}),X(e,`${JSON.stringify(t,null... L16: `)}function Zr(e,t)

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/hook.mjsView on unpkg · L9

dist/cli.mjsView file

10Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/cli.mjs L10: `):l.join(` L11: `).trimEnd();return(0,Y.usableCatalogText)(m)}});var De=ze(g=>{"use strict";Object.defineProperty(g,"__esModule",{value:!0});g.usableCatalogText=g.parseFrontmatterField=g.parseFron... L12: `)}function Z(e,t){Dc(Co(e),{recursive:!0});let n=Io(Co(e),`.${$c(e)}.${process.pid}.${Uc(4).toString("hex")}.tmp`);try{jc(n,t,"utf8");try{Eo(n,e)}catch(r){let o=r instanceof Error... L13: `)}catch(s){let i=s instanceof Error?s.message:String(s);f(`WARN: operator identity cache write failed open: ${i}`)}}function zo(e,t=Date.now()){if(!e)return!0;if(Ie(e)?.operator_i...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.mjsView on unpkg · L10

Source & flagged code

5 flagged · loading source

dist/hook.mjsView file

10`).trimEnd();return(0,J.usableCatalogText)(f)}});var be=Ue(m=>{"use strict";Object.defineProperty(m,"__esModule",{value:!0});m.usableCatalogText=m.parseFrontmatterField=m.parseFron... L11: `)}function X(e,t){ba(Mr(e),{recursive:!0});let n=wr(Mr(e),`.${Ma(e)}.${process.pid}.${Pa(4).toString("hex")}.tmp`);try{va(n,t,"utf8");try{Tr(n,e)}catch(r){let o=r instanceof Error... L12: `)}catch(s){let i=s instanceof Error?s.message:String(s);h(`WARN: operator identity cache write failed open: ${i}`)}}function lo(e,t=Date.now()){if(!e)return!0;if(_e(e)?.operator_i...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/hook.mjsView on unpkg · L10

9`):l.join(` L10: `).trimEnd();return(0,J.usableCatalogText)(f)}});var be=Ue(m=>{"use strict";Object.defineProperty(m,"__esModule",{value:!0});m.usableCatalogText=m.parseFrontmatterField=m.parseFron... L11: `)}function X(e,t){ba(Mr(e),{recursive:!0});let n=wr(Mr(e),`.${Ma(e)}.${process.pid}.${Pa(4).toString("hex")}.tmp`);try{va(n,t,"utf8");try{Tr(n,e)}catch(r){let o=r instanceof Error... L12: `)}catch(s){let i=s instanceof Error?s.message:String(s);h(`WARN: operator identity cache write failed open: ${i}`)}}function lo(e,t=Date.now()){if(!e)return!0;if(_e(e)?.operator_i...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/hook.mjsView on unpkg · L9

Findings

5 High3 Medium4 Low

HighSame File Env Network Executiondist/hook.mjs

HighCommand Output Exfiltrationdist/hook.mjs

HighSandbox Evasion Gated Capabilitydist/hook.mjs

HighCloud Metadata Accessdist/hook.mjs

HighTrigger Reachable Command Output Exfiltrationdist/cli.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code