registry / @lucideproxy/svg / 0.0.27
@lucideproxy/svg@0.0.27
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not a normal SVG library and includes intentionally obscured runtime execution plus browser traffic-interception capability. The evidence supports a warning for dangerous, insufficiently auditable behavior rather than a block for confirmed malware.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A user or renderer opens index.svg or index.html.
Impact
Can proxy and rewrite browser traffic within its configured application scope; no install-time or host-level compromise was established.
Mechanism
Obfuscated browser proxy with service-worker request interception and runtime Function execution.
AI rationale
This is not a normal SVG library and includes intentionally obscured runtime execution plus browser traffic-interception capability. The evidence supports a warning for dangerous, insufficiently auditable behavior rather than a block for confirmed malware.
Evidence
index.svgassets/index-Zt3BOoya-69156806.jsassets/boot-CGgtvOD6-69156806.jsc3pr4/iivwd6.jspackage.json0rkzog.js81hk7/p4hqqf.wasm
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- index.svg executes scripts and dynamically imports the bundled application when rendered.
- The imported application contains heavily obfuscated code that constructs and invokes Function at runtime.
- The proxy boot module registers a service worker and supplies proxy, WASM, and injection assets.
- The service worker intercepts matching fetches and forwards request data through its controller.
Evidence against
- package.json has no lifecycle scripts, bin, main, or module entrypoint.
- The service worker is activated only when the browser application is opened; no install-time host mutation was found.
- No Node filesystem, process environment, child-process, or credential-harvesting code was found in inspected sources.
Behavioral surface
ChildProcessDynamicRequireFilesystemNetworkWebSocket
HighEntropyStringsMinifiedObfuscated
Source & flagged code
6 flagged · loading sourceassets/livekit-DqpdvE-G-69156806.jsView file
13patternName = generic_password
severity = medium
line = 13
matchedText = `},e.par...+`\r
Medium
Secret Pattern
Package contains a possible secret pattern.
assets/livekit-DqpdvE-G-69156806.jsView on unpkg · L1381hk7/yy9wwp.jsView file
17L18: //# sourceURL=${A}`)();n=c,o=l}else n=g.z$,o=g.Mt;r.construct&&(l.construct=function(e,t,i){let n,s=!1,a={fn:e,this:null,args:t,newTarget:i,return:e=>{s=!0,n=e},call:()=>(s=!0,n=o(...
L19: //# sourceURL=${r.url.href}`),n}return o.body;case"style":return(0,i.sM)(await o.text(),e.context,r.meta);case"sharedworker":case"worker":return(0,i.iP)(new Uint8Array(await o.arra...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
81hk7/yy9wwp.jsView on unpkg · L17assets/index-Zt3BOoya-69156806.jsView file
Findings
4 High6 Medium4 Low
HighObfuscated Payload Loaderassets/index-Zt3BOoya-69156806.js
HighObfuscated
HighKnown Malware Source Similarityassets/fingerprint-Y5nV5FVa-69156806.js
HighKnown Malware Source Fingerprint Signatureassets/fingerprint-Y5nV5FVa-69156806.js
MediumSecret Patternassets/livekit-DqpdvE-G-69156806.js
MediumDynamic Require81hk7/yy9wwp.js
MediumNetwork
MediumProtestware
MediumShips Wasm Module81hk7/p4hqqf.wasm
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @lucideproxy/svg@0.0.27.
See all versions of @lucideproxy/svg for other recorded verdicts.
- Review the evidence and your use of @lucideproxy/svg@0.0.27 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.