@evomap/evolver-proxy@2.0.37: Manual Review npm security report | LPM Firewall

Loading npm security reports…

@evomap/evolver-proxy@2.0.37: Manual Review npm security report | LPM Firewall

Source & flagged code

10 flagged · loading source

dist/llm/upstream.jsView file

1const _0x15ab9e=_0x4bd4;(function(_0xdd939c,_0x6fc484){const _0x4324fc=_0x4bd4,_0xa8f2ab=_0xdd939c();while(!![]){try{const _0x60be4a=parseInt(_0x4324fc(0x3ab,'\x30\x47\x50\x21'))/(...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

dist/llm/traceEnvelope.jsView file

1(function(_0x3f24b2,_0x363dbe){const _0x9e57bd=_0x176e,_0x2168b0=_0x3f24b2();while(!![]){try{const _0xdfe153=-parseInt(_0x9e57bd(0x1a3,'\x6b\x71\x6b\x70'))/(0x16a2+0x97c+-0x201d)+-...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/llm/traceEnvelope.jsView on unpkg · L1

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg

Source & flagged code

10 flagged

dist/llm/upstream.jsView file

Lines 1-1javascript

1const _0x15ab9e=_0x4bd4;(function(_0xdd939c,_0x6fc484){const _0x4324fc=_0x4bd4,_0xa8f2ab=_0xdd939c();while(!![]){try{const _0x60be4a=parseInt(_0x4324fc(0x3ab,'\x30\x47\x50\x21'))/(-0x208b+0x92c+0x1760)+-parseInt(_0x4324fc(0x1bb,'\x65\x78\x39\x47'))/(0x2045*-0x1+0x382*-0x2+-0x1*-0x274b)*(parseInt(_0x4324fc(0x1e4,'\x78\x34\x52\x61'))/(0xd4*0x1f+-0xd8b+-0xc1e))+parseInt(_0x4324fc(0x305,'\x69\x62\x41\x41'))/(-0x2301+0x1b40+0x7c5)*(-parseInt(_0x4324fc(0x2dc,'\x40\x47\x24\x40'))/(-0x1d96+-0x1ce0+0x3a7b))+-parseInt(_0x4324fc(0x3ed,'\x53\x40\x77\x4b'))/(0x195a+0x7*0x2ec+-0x2dc8)+parseInt(_0x4324fc(0x2 ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

Long lines were clipped for display.

dist/llm/traceEnvelope.jsView file

Lines 1-1javascript

1(function(_0x3f24b2,_0x363dbe){const _0x9e57bd=_0x176e,_0x2168b0=_0x3f24b2();while(!![]){try{const _0xdfe153=-parseInt(_0x9e57bd

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg