@evomap/evolver-proxy: Manual Review npm security report (Allow) | LPM Firewall

Loading npm security reports…

@evomap/evolver-proxy: Manual Review npm security report (Allow) | LPM Firewall

Source & flagged code

10 flagged · loading source

dist/llm/upstream.jsView file

1const _0x3fdba9=_0x3fce;(function(_0x311fd3,_0x1009e4){const _0x32413a=_0x3fce,_0x57d049=_0x311fd3();while(!![]){try{const _0x327a0f=-parseInt(_0x32413a(0x44d,'\x4e\x72\x32\x46'))/...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

dist/llm/traceEnvelope.jsView file

1(function(_0x9f2b71,_0xd4d94a){const _0xe4e42c=_0x7a1a,_0x5662eb=_0x9f2b71();while(!![]){try{const _0x417707=parseInt(_0xe4e42c(0x1f7,'\x56\x5b\x2a\x79'))/(0x2*0x1344+-0xa6*0x32+-0...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/llm/traceEnvelope.jsView on unpkg · L1

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg

Source & flagged code

10 flagged

dist/llm/upstream.jsView file

Lines 1-1javascript

1const _0x3fdba9=_0x3fce;(function(_0x311fd3,_0x1009e4){const _0x32413a=_0x3fce,_0x57d049=_0x311fd3();while(!![]){try{const _0x327a0f=-parseInt(_0x32413a(0x44d,'\x4e\x72\x32\x46'))/(-0x912+-0x1f1e+0x2831)*(parseInt(_0x32413a(0x3dc,'\x28\x6e\x55\x73'))/(-0x71f+-0x11cb+0x13f*0x14))+-parseInt(_0x32413a(0x377,'\x4a\x5b\x58\x43'))/(0x12b*0x1+-0x1*-0x26bb+-0x27e3)+parseInt(_0x32413a(0x229,'\x21\x74\x52\x4f'))/(-0x1948+0x68*-0x20+0x264c)+-parseInt(_0x32413a(0x422,'\x70\x6a\x47\x79'))/(-0x242c+0x7c6+0x1c6b)+parseInt(_0x32413a(0x355,'\x34\x52\x21\x39'))/(0x51b*-0x1+-0x236a+-0x61*-0x6b)*(-parseInt(_0x324 ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

Long lines were clipped for display.

dist/llm/traceEnvelope.jsView file

Lines 1-1javascript

1(function(_0x9f2b71,_0xd4d94a){const _0xe4e42c=_0x7a1a,_0x5662eb=_0x9f2b71();while(!![]){try{const _0x417707=parseInt(_0xe4e42c

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg