registry / @ev-ai/agent-hook / 1.3.0

@ev-ai/agent-hook@1.3.0

⚠ Under review

Cross-runner runtime telemetry hook for Claude Code, Cursor, and Codex

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 50 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 7 file(s), 1.90 MB of source, external domains: 169.254.169.254, api.openai.com, cdn.ev-ai.ai, hooks.ev-ai.ai, metadata.google.internal

Source & flagged code

43 flagged

dist/plugin-hooks.mjsView file

77patternName = google_api_key severity = high line = 77

High

High Secret

Package contains a high-severity secret pattern.

dist/plugin-hooks.mjsView on unpkg · L77

77patternName = google_api_key severity = high line = 77

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L77

78patternName = google_api_key severity = high line = 78

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L78

79patternName = google_api_key severity = high line = 79

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L79

80patternName = google_api_key severity = high line = 80

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L80

81patternName = google_api_key severity = high line = 81

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L81

82patternName = google_api_key severity = high line = 82

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L82

83patternName = google_api_key severity = high line = 83

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L83

84patternName = google_api_key severity = high line = 84

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L84

85patternName = google_api_key severity = high line = 85

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L85

86patternName = google_api_key severity = high line = 86

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L86

87patternName = google_api_key severity = high line = 87

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L87

88patternName = google_api_key severity = high line = 88

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L88

89patternName = google_api_key severity = high line = 89

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L89

90patternName = google_api_key severity = high line = 90

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L90

91patternName = google_api_key severity = high line = 91

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L91

92patternName = google_api_key severity = high line = 92

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L92

4701} L4702: eval(input, pos) { L4703: switch (this.type) {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/plugin-hooks.mjsView on unpkg · L4701

dist/launcher.mjsView file

2L3: import{spawn as Ur}from"node:child_process";import{randomBytes as Br}from"node:crypto";import{readFile as Vr,rm as rn,writeFile as Kr}from"node:fs/promises";import{homedir as jr}fr... L4: `;case"r":return"\r";case"t":return" ";case"u":{let n=this.text.slice(this.i,this.i+4);if(!/^[0-9a-fA-F]{4}$/.test(n))throw new SyntaxError("invalid unicode escape");return this.i+...

High

Child Process

Package source references child process execution.

dist/launcher.mjsView on unpkg · L2

dist/managed-hooks-snippet.cjsView file

69patternName = google_api_key severity = high line = 69

High

Secret Pattern

Google API key in dist/managed-hooks-snippet.cjs

dist/managed-hooks-snippet.cjsView on unpkg · L69

10}; L11: var __commonJS = (cb, mod) => function __require() { L12: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/managed-hooks-snippet.cjsView on unpkg · L10

dist/hook.mjsView file

14`,10],["\v",11],["\f",12],["\r",13],[" ",32],['"',34],["$",36],["&",38],["'",39],["(",40],[")",41],["*",42],["+",43],["-",45],[".",46],["0",48],["1",49],["2",50],["3",51],["4",52],... L15: `):n+="\\n";break;case _.CODES.get("\r"):n+="\\r";break;case _.CODES.get("\b"):n+="\\b";break;case _.CODES.get("\f"):n+="\\f";break;default:{let r=e.toString(16);e<256?(n+="\\x",r.... L16: `}return t}},Hs=class{constructor(t=0,e=new et,n=!1){this.i=t,this.out=e,this.nullable=n}},ad=class wn{static ANY_RUNE_NOT_NL(){return[0,_.CODES.get(` ... L29: `)));let i=!0;for(;!e.more()||e.peek()!==_.CODES.get("]")||i;){if(e.more()&&e.lookingAt("-")&&(this.flags&S.PERL_X)===0&&!i){let c=e.rest();if(c==="-"||!c.startsWith("-]"))throw e.... L30: `)}function kn(t){return t.replace(/^([a-z]+:\/\/)[^/@]+@/i,"$1")}fu

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/hook.mjsView on unpkg · L14

14`,10],["\v",11],["\f",12],["\r",13],[" ",32],['"',34],["$",36],["&",38],["'",39],["(",40],[")",41],["*",42],["+",43],["-",45],[".",46],["0",48],["1",49],["2",50],["3",51],["4",52],... L15: `):n+="\\n";break;case _.CODES.get("\r"):n+="\\r";break;case _.CODES.get("\b"):n+="\\b";break;case _.CODES.get("\f"):n+="\\f";break;default:{let r=e.toString(16);e<256?(n+="\\x",r.... L16: `}return t}},Hs=class{constructor(t=0,e=new et,n=!1){this.i=t,this.out=e,this.nullable=n}},ad=class wn{static ANY_RUNE_NOT_NL(){return[0,_.CODES.get(` ... L28: `),_.CODES.get(` L29: `)));let i=!0;for(;!e.more()||e.peek()!==_.CODES.get("]")||i;){if(e.more()&&e.lookingAt("-")&&(this.flags&S.PERL_X)===0&&!i){let c=e.rest();if(c==="-"||!c.startsWith("-]"))throw e.... L30: `)}function kn(t){return t.replace(/^([a-z]+:\

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/hook.mjsView on unpkg · L14

dist/cli.mjsView file

4Cross-file remote execution chain: dist/cli.mjs spawns dist/hook.mjs; helper contains network access plus dynamic code execution. L4: L5: var Th=Object.create;var vr=Object.defineProperty;var xh=Object.getOwnPropertyDescriptor;var Lh=Object.getOwnPropertyNames;var kh=Object.getPrototypeOf,Ph=Object.prototype.hasOwnPr... L6: `,10],["\v",11],["\f",12],["\r",13],[" ",32],['"',34],["$",36],["&",38],["'",39],["(",40],[")",41],["*",42],["+",43],["-",45],[".",46],["0",48],["1",49],["2",50],["3",51],["4",52],... L7: `):n+="\\n";break;case _.CODES.get("\r"):n+="\\r";break;case _.CODES.get("\b"):n+="\\b";break;case _.CODES.get("\f"):n+="\\f";break;default:{let r=e.toString(16);e<256?(n+="\\x",r.... L8: `}return t}},Cs=class{constructor(t=0,e=new Ze,n=!1){this.i=t,this.out=e,this.nullable=n}},al=cla

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.mjsView on unpkg · L4

dist/launcher-update.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/launcher-update.mjs#virtual:normalized:round1View on unpkg

dist/managed-hooks-snippet.mjsView file

74patternName = google_api_key severity = high line = 74

High

Secret Pattern

Google API key in dist/managed-hooks-snippet.mjs

dist/managed-hooks-snippet.mjsView on unpkg · L74

75patternName = google_api_key severity = high line = 75

High

Secret Pattern

Google API key in dist/managed-hooks-snippet.mjs

dist/managed-hooks-snippet.mjsView on unpkg · L75

76patternName = google_api_key severity = high line = 76

High

Secret Pattern

Google API key in dist/managed-hooks-snippet.mjs

dist/managed-hooks-snippet.mjsView on unpkg · L76

77patternName = google_api_key severity = high line = 77

High

Secret Pattern

Google API key in dist/managed-hooks-snippet.mjs

dist/managed-hooks-snippet.mjsView on unpkg · L77

Source & flagged code

43 flagged · loading source

dist/plugin-hooks.mjsView file

77patternName = google_api_key severity = high line = 77

High

High Secret

Package contains a high-severity secret pattern.

dist/plugin-hooks.mjsView on unpkg · L77

77patternName = google_api_key severity = high line = 77

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L77

78patternName = google_api_key severity = high line = 78

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjsView on unpkg · L78

79patternName = google_api_key severity = high line = 79

High

Secret Pattern

Google API key in dist/plugin-hooks.mjs

dist/plugin-hooks.mjs

Findings

41 High4 Medium5 Low

HighHigh Secretdist/plugin-hooks.mjs

HighChild Processdist/launcher.mjs

HighSame File Env Network Executiondist/hook.mjs

HighCommand Output Exfiltrationdist/hook.mjs

HighSandbox Evasion Gated Capabilitydist/hook.mjs

HighCloud Metadata Accessdist/hook.mjs

HighCross File Remote Execution Contextdist/cli.mjs

HighSemantic Analysis Limiteddist/launcher-update.mjs#virtual:normalized:round1

HighSecret Patterndist/plugin-hooks.mjs

Affected versions and remediation

This report applies to @ev-ai/agent-hook@1.3.0.

See all versions of @ev-ai/agent-hook for other recorded verdicts.

Review the evidence and your use of @ev-ai/agent-hook@1.3.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-15 10:50:08.073Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.