@evomap/evolver-proxy@2.0.36: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@evomap/evolver-proxy@2.0.36: Suspicious npm security report | LPM Firewall

Source & flagged code

10 flagged · loading source

dist/llm/upstream.jsView file

1const _0x511b1f=_0x15fa;(function(_0xdf4ae1,_0x5007ed){const _0x2567af=_0x15fa,_0x463453=_0xdf4ae1();while(!![]){try{const _0xb5ea30=-parseInt(_0x2567af(0x4ad,'\x49\x67\x26\x52'))/...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

dist/llm/traceEnvelope.jsView file

1(function(_0x5bf318,_0x567756){const _0x586262=_0x3cf6,_0x551af9=_0x5bf318();while(!![]){try{const _0x1fc3d8=-parseInt(_0x586262(0xae,'\x4a\x45\x26\x45'))/(0x13*0x1c0+0x198*-0x2+-0...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/llm/traceEnvelope.jsView on unpkg · L1

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg

Source & flagged code

10 flagged

dist/llm/upstream.jsView file

Lines 1-1javascript

1const _0x511b1f=_0x15fa;(function(_0xdf4ae1,_0x5007ed){const _0x2567af=_0x15fa,_0x463453=_0xdf4ae1();while(!![]){try{const _0xb5ea30=-parseInt(_0x2567af(0x4ad,'\x49\x67\x26\x52'))/(0x1*0x256b+-0x1*0x1c1f+-0xd*0xb7)*(parseInt(_0x2567af(0x305,'\x52\x40\x5b\x6b'))/(-0x7*-0x1c+-0x988+-0x8c6*-0x1))+parseInt(_0x2567af(0x25f,'\x35\x4a\x5b\x37'))/(-0x1069+-0x2057+0x30c3)*(-parseInt(_0x2567af(0x492,'\x51\x48\x50\x5b'))/(-0x6d*0x17+0x335*0x5+0x1*-0x63a))+-parseInt(_0x2567af(0x467,'\x6c\x54\x4a\x4f'))/(0x2687+0x1496+-0x3b18)+parseInt(_0x2567af(0x3f9,'\x67\x44\x5d\x72'))/(0x2c1+-0x5*0x46a+0x1357)*(-parseI ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

Long lines were clipped for display.

dist/llm/traceEnvelope.jsView file

Lines 1-1javascript

1(function(_0x5bf318,_0x567756){const _0x586262=_0x3cf6,_0x551af9=_0x5bf318();while(!![]){try{const _0x1fc3d8=-parseInt(_0x586262

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.33 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg