@eventcatalog/core
<div align="center">
This report shows the evidence for @eventcatalog/core@5.8.0. 0 of 60 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe GitHub token flow is consistent with authenticated access to configured GitHub sources, but separate runtime telemetry sends identifying catalog metadata to an analytics endpoint by default. This is suspicious telemetry, not evidence of credential theft.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running a build, development server, or server startup.
Impact
An external analytics service receives organization and catalog identifiers and catalog-derived operational metadata without an explicit opt-in.
Mechanism
The package posts command and catalog metadata to Simple Analytics unless telemetry is disabled; separately configured cloud analytics can send resource counts to its configured endpoint.
AI rationale
The GitHub token flow is consistent with authenticated access to configured GitHub sources, but separate runtime telemetry sends identifying catalog metadata to an analytics endpoint by default. This is suspicious telemetry, not evidence of credential theft.
Evidence
dist/eventcatalog.cjs
Network endpoints2
queue.simpleanalyticscdn.com/eventsapi.ecingest.dev/v1/analytics/ingest
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime telemetry posts to queue.simpleanalyticscdn.com and runs unless telemetry is disabled by configuration or environment variables.
- The telemetry payload includes organization and catalog IDs, license-related details, a content hash, resource counts, directory sources, and feature information.
- The CLI calls the telemetry routine during builds; related calls also run during development and server startup.
Evidence against
- GitHub tokens are used for authenticated requests in the GitHub federation provider, consistent with fetching configured GitHub sources.
- Separate cloud resource analytics requires an enabled configuration with a tracking ID and write key.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
5 flaggedeventcatalog/src/components/Search/SearchModal.tsxView file
138const loadPagefindModule = (url: string) => {
L139: const nativeImport = new Function('url', 'return import(url)') as (url: string) => Promise<PagefindModule>;
L140: return nativeImport(url);
High
Eval
Package source references dynamic code evaluation.
eventcatalog/src/components/Search/SearchModal.tsxView on unpkg · L138dist/migrations/message-channels-to-service-channels.cjsView file
35module.exports = __toCommonJS(message_channels_to_service_channels_exports);
L36: var import_node_fs = __toESM(require("fs"), 1);
L37: var import_glob = require("glob");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/migrations/message-channels-to-service-channels.cjsView on unpkg · L35dist/eventcatalog.cjsView file
30var import_commander = require("commander");
L31: var import_node_child_process2 = require("child_process");
L32: var import_node_path22 = require("path");
L33: var import_node_http = __toESM(require("http"), 1);
L34: var import_fs = __toESM(require("fs"), 1);
...
L80: }`;
L81: (0, import_node_module.register)(`data:text/javascript,${encodeURIComponent(hook)}`);
L82: };
...
L84: try {
L85: const packageJson = JSON.parse(await (0, import_promises.readFile)(import_node_path.default.join(projectDirectory, "package.json"), "utf-8"));
L86: return packageJson?.type === "commonjs";
...
L290: }
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/eventcatalog.cjsView on unpkg · L30dist/chunk-YRZK7HKX.jsView file
32package = @eventcatalog/core; repositoryIdentity = eventcatalog; dependency = @eventcatalog/fitness
L32: try {
L33: const { discoverFitnessFiles } = await import("@eventcatalog/fitness");
L34: return discoverFitnessFiles(projectDir).files.length;
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/chunk-YRZK7HKX.jsView on unpkg · L32eventcatalog/src/components/SchemaExplorer/ExamplesViewer.tsx#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
eventcatalog/src/components/SchemaExplorer/ExamplesViewer.tsx#virtual:normalized:round1View on unpkgFindings
1 Critical3 High4 Medium4 Low
CriticalCredential Exfiltrationdist/eventcatalog.cjs
HighEvaleventcatalog/src/components/Search/SearchModal.tsx
HighCopied Package Dependency Bridgedist/chunk-YRZK7HKX.js
HighSemantic Analysis Limitedeventcatalog/src/components/SchemaExplorer/ExamplesViewer.tsx#virtual:normalized:round1
MediumDynamic Requiredist/migrations/message-channels-to-service-channels.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @eventcatalog/core@5.8.0.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @eventcatalog/core@5.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
60 known versions5.8.0latestshownSuspiciousTelemetryWarnPublishedNov 3, 2026, 1:55 PM5.7.5SuspiciousTelemetryWarnPublishedOct 30, 2026, 10:58 AM5.7.4Clean—AllowPublishedOct 28, 2026, 12:33 PM5.7.2Clean—AllowPublishedOct 27, 2026, 1:09 PM5.7.1Clean—AllowPublishedOct 27, 2026, 9:20 AM5.6.0Clean—AllowPublishedOct 23, 2026, 11:35 AM5.5.2Clean—AllowPublishedOct 21, 2026, 1:27 PM5.5.1Clean—AllowPublishedOct 21, 2026, 8:39 AM5.5.0Clean—AllowPublishedOct 20, 2026, 3:18 PM5.2.1Clean—AllowPublishedOct 16, 2026, 3:01 PM5.2.0Clean—AllowPublishedOct 16, 2026, 10:38 AM5.1.1Clean—AllowPublishedOct 15, 2026, 4:34 PM5.1.0Clean—AllowPublishedOct 15, 2026, 2:05 PM5.0.1Clean—AllowPublishedOct 14, 2026, 2:22 PM5.0.0Clean—AllowPublishedOct 14, 2026, 12:49 PM4.12.3Clean—AllowPublishedSep 29, 2026, 3:32 PM4.12.2Clean—AllowPublishedSep 28, 2026, 9:10 AM4.12.1Clean—AllowPublishedSep 23, 2026, 12:06 PM4.11.2Clean—AllowPublishedSep 22, 2026, 3:58 PM4.11.1Clean—AllowPublishedSep 22, 2026, 3:46 PM4.11.0Clean—AllowPublishedSep 22, 2026, 1:46 PM4.10.15Clean—AllowPublishedSep 22, 2026, 11:46 AM4.10.14Clean—AllowPublishedSep 13, 2026, 12:26 PM4.10.13Clean—AllowPublishedSep 9, 2026, 7:15 AM4.10.12Clean—AllowPublishedSep 8, 2026, 6:28 PM4.10.11Clean—AllowPublishedSep 8, 2026, 6:17 PM4.10.10Clean—AllowPublishedSep 7, 2026, 8:59 AM4.10.8Clean—AllowPublishedSep 4, 2026, 2:15 PM4.10.6Clean—AllowPublishedSep 3, 2026, 8:10 PM4.10.5Clean—AllowPublishedSep 3, 2026, 11:37 AM4.10.3Clean—AllowPublishedAug 31, 2026, 6:52 PM4.10.2Clean—AllowPublishedAug 31, 2026, 4:55 PM4.10.1Clean—AllowPublishedAug 31, 2026, 4:29 PM4.10.0Clean—AllowPublishedAug 31, 2026, 9:21 AM4.9.0Suspicious—WarnUnder ReviewAug 28, 2026, 12:27 PM4.8.4Suspicious—WarnUnder ReviewAug 28, 2026, 8:33 AM4.8.3Clean—AllowPublishedAug 27, 2026, 8:20 PM4.8.2Clean—AllowPublishedAug 27, 2026, 3:59 PM4.8.1Clean—AllowPublishedAug 27, 2026, 3:24 PM4.8.0Clean—AllowPublishedAug 27, 2026, 2:50 PM4.7.12Clean—AllowPublishedAug 27, 2026, 9:45 AM4.7.11Suspicious—WarnUnder ReviewAug 27, 2026, 9:09 AM4.7.10Suspicious—WarnUnder ReviewAug 27, 2026, 8:19 AM4.7.9Suspicious—WarnUnder ReviewAug 24, 2026, 8:19 AM4.7.8Clean—AllowPublishedAug 24, 2026, 8:06 AM4.7.7Suspicious—WarnUnder ReviewAug 24, 2026, 7:19 AM4.7.5Clean—AllowPublishedAug 21, 2026, 11:40 AM4.7.4Suspicious—WarnUnder ReviewAug 19, 2026, 3:32 PM4.7.2Suspicious—WarnUnder ReviewAug 19, 2026, 1:19 PM4.6.1Clean—AllowPublishedAug 11, 2026, 11:25 AM4.6.0Clean—AllowPublishedAug 10, 2026, 2:37 PM4.5.1Suspicious—WarnPublishedAug 7, 2026, 9:20 AM4.2.3Suspicious—WarnPublishedJul 15, 2026, 3:32 PM4.2.1Suspicious—WarnPublishedJul 15, 2026, 9:57 AM4.2.0Suspicious—WarnUnder ReviewJul 14, 2026, 3:57 PM4.1.3Suspicious—WarnUnder ReviewJul 9, 2026, 2:38 PM4.1.1Suspicious—WarnUnder ReviewJul 9, 2026, 10:55 AM4.0.2Suspicious—WarnUnder ReviewJul 3, 2026, 2:08 PM4.0.0Suspicious—WarnUnder ReviewJul 3, 2026, 11:59 AM3.48.4Suspicious—WarnPublishedJun 24, 2026, 12:39 PM