registry / @evomap/evolver-proxy / 2.0.30

@evomap/evolver-proxy@2.0.30

系统级 mailbox/hub 同步 daemon (Node)

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

When its proxy daemon is run, the package can receive hub directives to download and replace its executable. Obfuscated proxy and trace code prevents confirming what LLM content is retained or transmitted.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running the evolver-proxy CLI with self-update enabled or trace functionality active.

Impact

A compromised trusted update channel or hidden trace behavior could execute a replacement binary or expose proxied LLM data.

Mechanism

Obfuscated traffic handling plus hub-directed binary self-update.

AI rationale

No automatic lifecycle attack is present, but pervasive obfuscation conceals the behavior of modules that process LLM traffic while the package has a hub-controlled updater that replaces binaries. The concrete runtime capability warrants a warning rather than a malware block.

Evidence

dist/selfUpdate/releaseBinary.jsdist/selfUpdate/executor.jsdist/selfUpdate/windowsUpdater.jswindows-updater/updater.exewindows-updater/pending.json

Network endpoints1

github.com/EvoMap/evolver/releases

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Most LLM and trace modules are deliberately obfuscated, preventing meaningful audit of their handling of proxied content and credentials.
The runtime includes a hub-directed self-update path that downloads release artifacts and replaces the executable.
Windows update code can create and run an updater executable under its private state directory.

Evidence against

package.json has no preinstall, install, or postinstall hook.
The risky paths are reached by the package's explicit proxy CLI/runtime, not package installation.
The updater code contains checks for manifest verification and fixed managed paths.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 56 file(s), 1.95 MB of source, external domains: 127.0.0.1, evomap.ai, github.com

Source & flagged code

5 flagged

dist/llm/upstream.jsView file

Lines 1-1javascript

1const _0x476110=_0x3ab5;(function(_0x51f8dd,_0x596d19){const _0x2e4e26=_0x3ab5,_0x46f4cc=_0x51f8dd();while(!![]){try{const _0x27a03b=-parseInt(_0x2e4e26(0x32c,'\x39\x40\x46\x6a'))/(-0x2160+-0x1*-0x35b+0x1e06)*(parseInt(_0x2e4e26(0x13f,'\x4e\x53\x52\x37'))/(-0x20d7+0x38e+0x1d4b))+parseInt(_0x2e4e26(0x24e,'\x4e\x5d\x6d\x5b'))/(0xb99+-0xce4+0x14e)+-parseInt(_0x2e4e26(0x2c6,'\x52\x56\x50\x56'))/(-0x493*-0x8+-0x1*-0x32c+-0x13e0*0x2)*(parseInt(_0x2e4e26(0x2dd,'\x52\x56\x50\x56'))/(-0x32b*0x8+0x1f13*-0x1+0x3870))+parseInt(_0x2e4e26(0x242,'\x26\x55\x51\x54'))/(0x97*-0x1e+0xd*-0x17b+0x24f7)+parseInt(_0 ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

Long lines were clipped for display.

dist/llm/traceEnvelope.jsView file

Lines 1-1javascript

1(function(_0x468733,_0x143e21){const _0x1eb8dd=_0x1a0d,_0x383251=_0x468733();while(!![]){try{const _0x38eebd=parseInt(_0x1eb8dd

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @evomap/evolver-proxy@2.0.18 matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.18 similarity = 0.536 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

Lines 51-91javascript

51 if (platform === 'linux' && arch === 'arm64')

52 return 'evolver-linux-arm64';

53 if (platform === 'linux'

Source & flagged code

5 flagged · loading source

dist/llm/upstream.jsView file

1const _0x476110=_0x3ab5;(function(_0x51f8dd,_0x596d19){const _0x2e4e26=_0x3ab5,_0x46f4cc=_0x51f8dd();while(!![]){try{const _0x27a03b=-parseInt(_0x2e4e26(0x32c,'\x39\x40\x46\x6a'))/...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

dist/llm/traceEnvelope.jsView file

1(function(_0x468733,_0x143e21){const _0x1eb8dd=_0x1a0d,_0x383251=_0x468733();while(!![]){try{const _0x38eebd=parseInt(_0x1eb8dd(0xe9,'\x79\x24\x78\x4a'))/(0x5*-0xfe+-0x246e+0x2965)...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/llm/traceEnvelope.jsView on unpkg · L1

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/unixController.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

71export async function downloadGithubReleaseArtifact(targetVersion, directive, opts = {}) { [redacted](directive); const version = requiredVersionForRelease(targetVersion); const assetName = releaseAssetName(opts.platform, opts.arch);

Medium

Ai Review Evidence

The runtime includes a hub-directed self-update path that downloads release artifacts and replaces the executable.

dist/selfUpdate/releaseBinary.jsView on unpkg · L71

Findings

1 Critical2 High5 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/selfUpdate/unixController.js

HighObfuscated Payload Loaderdist/llm/traceEnvelope.js

HighSemantic Analysis Limiteddist/selfUpdate/windowsUpdater.js#virtual:normalized:round1

MediumDynamic Requiredist/llm/upstream.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumAi Review Evidencedist/selfUpdate/releaseBinary.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @evomap/evolver-proxy@2.0.30.

See version security history for other recorded verdicts.

Review the evidence and your use of @evomap/evolver-proxy@2.0.30 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-05 08:26:59.799Z (UTC).