Loading npm security reports…

@evomap/evolver-proxy@2.0.35: Malicious npm security report | LPM Firewall

registry / @evomap/evolver-proxy / 2.0.35

@evomap/evolver-proxy@2.0.35

系统级 mailbox/hub 同步 daemon (Node)

AI Security Review

scanned 24d ago · by lpm-firewall-ai

Running either proxy can capture LLM request and response data by default. The trace path is wired to a mailbox that produces Hub-decryptable encrypted envelopes and is backfilled for outbound delivery.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A user runs evolver-llm-proxy or evolver-proxy with tracing enabled, which is the default for LLM body capture.

Impact

Sensitive prompts, responses, and tool data can be collected locally and sent to a configured Hub.

Mechanism

Obfuscated LLM trace capture and Hub-envelope queuing.

Attack narrative

When the user starts the proxy, it enables tracing, writes trace records, and provides a mailbox to the trace sink. The trace implementation can create envelopes decryptable by the configured Hub, while the daemon backfills queued records for delivery. The relevant runtime modules are deliberately obfuscated, so the claimed redaction and delivery behavior cannot be independently audited. This creates a concrete path from LLM conversations to an external Hub.

AI rationale

The package combines default LLM body collection, Hub-decryptable outbound trace envelopes, and pervasive deliberate obfuscation. Although it has no install hook, the runtime data-exfiltration path is concrete and cannot be safely audited.

Evidence

dist/bin/evolver-llm-proxy.jsdist/llm/traceSink.d.tsdist/llm/traceEnvelope.d.tsdist/llm/bodyCapture.d.tsdist/daemon/proxyDaemon.jsdist/llm/traceSink.jsdist/llm/traceBackfill.js

Source & flagged code

10 flagged · loading source

dist/daemon/proxyDaemon.jsView file

890if (ctx.route === 'POST /reference/import') L891: ctx.json(200, this.referenceStore.import(body['batch'])); L892: else {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/daemon/proxyDaemon.jsView on unpkg · L890

dist/llm/traceEnvelope.jsView file

1(function(_0x63b4c9,_0x3bc781){const _0x5c9272=_0xaa9a,_0x23a9c5=_0x63b4c9();while(!![]){try{const _0x1536ca=-parseInt(_0x5c9272(0x1d2,'\x75\x51\x4e\x46'))/(-0x2*-0xd52+-0x9d*0x25+...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/llm/traceEnvelope.jsView on unpkg · L1

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg

Source & flagged code

10 flagged

dist/daemon/proxyDaemon.jsView file

Lines 870-910javascript

870 runtimeNamespace,

871 ...(type ? { type } : {}),

872 limit,

873 }).map(mailbox.legacyMailboxMessage);

874 ctx.json(200, { messages, count: messages.length });

875 return true;

876 }

877 if (await this.collaborationFacade.handle(ctx))

878 return true;

879 if (['POST /reference/import', 'POST /reference/search', 'POST /reference/fetch', 'POST /reference/context'].includes(ctx.route)) {

880 const body = asRecord(await ctx.readJson());

881 if (hubModeMismatch(body['expected_hub_mode'], this.deps.hubMode)) {

882 ctx.json(409, { error: 'proxy_hub_mode_mismatch' });

883 return true;

884 }

885 if (!this.referenceStore) {

886 ctx.json(503, { error: 'reference_store_not_configured' });

887 return true;

888 }

889 try {

890 if (ctx.route === 'POST /reference/import')

891 ctx.json(200, this.referenceStore.import(body['batch']));

892 else {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/daemon/proxyDaemon.jsView on unpkg · L890

893 const query = reference.normalizeReferenceQuery(asRecord(body['query']));

894 if (ctx.route === 'POST /reference/search')

895 ctx.json(200, this.referenceStore.search(query));

896 else if (ctx.route === 'POST /reference/context')

897 ctx.json(200, this.referenceStore.context(query, body['max_chars'] === undefined ? undefined : Number(body['max_chars'])));

898 else {

899 if (this.hubAuthFailed()) {

900 ctx.json(401, this.hubAuthFailureBody());

901 return true;

902 }

903 if (!this.hub.references) {

904 ctx.json(501, { error: 'reference_hub_unsupported' });

905 return true;

906 }

907 const page = reference.decodeReferencePage(await this.hub.references.fetch(query), true);

908 const receipt = page.results.length ? this.referenceStore.import(page.results, 'hub') : { status: 'stored_reference', stored: 0, duplicates: 0, asset_ids: [], executable: false };

909 ctx.json(200, { ...receipt, ...page });

910 }

dist/llm/traceEnvelope.jsView file

Lines 1-1javascript

1(function(_0x63b4c9,_0x3bc781){const _0x5c9272=_0xaa9a,_0x23a9c5=_0x63b4c9();while(!![]){try{const _0x1536ca=-parseInt(_0x5c9272

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg