@evomap/evolver-proxy@2.0.40: Manual Review npm security report | LPM Firewall

Loading npm security reports…

@evomap/evolver-proxy@2.0.40: Manual Review npm security report | LPM Firewall

Source & flagged code

10 flagged · loading source

dist/llm/upstream.jsView file

1const _0x5013c1=_0x3e80;(function(_0x440966,_0x20f91b){const _0x32ba66=_0x3e80,_0x3eab2d=_0x440966();while(!![]){try{const _0x2fb49a=-parseInt(_0x32ba66(0x389,'\x24\x25\x30\x38'))/...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

dist/llm/traceEnvelope.jsView file

1(function(_0x540257,_0x26e3f6){const _0x39be02=_0x97c2,_0xd24349=_0x540257();while(!![]){try{const _0x3f684c=parseInt(_0x39be02(0x21a,'\x34\x5b\x68\x43'))/(0xb11+-0x1388+-0x4*-0x21...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/llm/traceEnvelope.jsView on unpkg · L1

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg

Source & flagged code

10 flagged

dist/llm/upstream.jsView file

Lines 1-1javascript

1const _0x5013c1=_0x3e80;(function(_0x440966,_0x20f91b){const _0x32ba66=_0x3e80,_0x3eab2d=_0x440966();while(!![]){try{const _0x2fb49a=-parseInt(_0x32ba66(0x389,'\x24\x25\x30\x38'))/(0x1*-0x1ebc+0x17cf+-0x377*-0x2)*(parseInt(_0x32ba66(0x2ed,'\x65\x57\x6e\x62'))/(0x1042*-0x2+-0xee3+0x2f69))+parseInt(_0x32ba66(0x308,'\x5b\x5b\x59\x72'))/(-0x1307+-0x529+0x1833)+parseInt(_0x32ba66(0x21b,'\x6d\x38\x23\x65'))/(-0x919+0xb7*-0x23+0x2222*0x1)+parseInt(_0x32ba66(0x312,'\x6d\x6b\x5a\x43'))/(0x111+-0x11*-0x195+-0x1bf1)*(-parseInt(_0x32ba66(0x257,'\x75\x47\x39\x2a'))/(0x175*0x11+0x7a5+-0x2064))+-parseInt(_0x ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/upstream.jsView on unpkg · L1

Long lines were clipped for display.

dist/llm/traceEnvelope.jsView file

Lines 1-1javascript

1(function(_0x540257,_0x26e3f6){const _0x39be02=_0x97c2,_0xd24349=_0x540257();while(!![]){try{const _0x3f684c=parseInt(_0x39be02

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/selfUpdate/windowsUpdater.js#virtual:normalized:round1View on unpkg

dist/selfUpdate/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/bootstrap.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/bootstrap.jsView on unpkg

dist/daemon/systemdNotifier.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/daemon/systemdNotifier.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/daemon/systemdNotifier.jsView on unpkg

dist/selfUpdate/releaseBinary.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/releaseBinary.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/releaseBinary.jsView on unpkg

dist/selfUpdate/transaction.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/transaction.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/transaction.jsView on unpkg

dist/selfUpdate/unixController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = dist/selfUpdate/unixController.js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/unixController.jsView on unpkg

dist/selfUpdate/windowsController.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfUpdate/windowsController.jsView on unpkg

dist/private/privateRuntimeSmokeOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @evomap/evolver-proxy@2.0.35 matchedPath = [redacted].js matchedIdentity = npm:QGV2b21hcC9ldm9sdmVyLXByb3h5:2.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/private/privateRuntimeSmokeOptions.jsView on unpkg