Loading npm security reports…
系统级 mailbox/hub 同步 daemon (Node)
A user-run LLM proxy can collect traffic traces locally and, when explicitly configured, queue encrypted envelopes for its configured EvoMap hub. A separately user-invoked proxy daemon can bootstrap and self-update from signed releases.
Package source references dynamic require/import behavior.
dist/llm/upstream.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/llm/traceEnvelope.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/router/messagesRoute.jsView on unpkgThis report applies to @evomap/evolver-proxy@2.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Package source references dynamic require/import behavior.
dist/llm/upstream.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/router/messagesRoute.jsView on unpkgSource contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/llm/traceEnvelope.jsView on unpkg · L1