@lucideproxy/svg@0.0.41
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package contains an obfuscated, dynamically evaluated browser proxy rather than an SVG library, which is a real dangerous capability. Its activation is user-driven site loading rather than an unconsented npm lifecycle action, and no concrete theft or destructive chain was confirmed.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A user serves and opens index.html, causing the browser application to initialize.
Impact
Can control routing of matching browser requests within the served site's service-worker scope.
Mechanism
Obfuscated browser-proxy runtime with service-worker fetch interception.
AI rationale
The package contains an obfuscated, dynamically evaluated browser proxy rather than an SVG library, which is a real dangerous capability. Its activation is user-driven site loading rather than an unconsented npm lifecycle action, and no concrete theft or destructive chain was confirmed.
Evidence
package.jsonassets/index-iwSJRUIT-9e93a8da.jsassets/boot-CJMUL1qg-9e93a8da.jsclzz4h.jshtrxl/ofk0w7.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Obfuscated main bundle reconstructs code with `new Function`.
- The served application registers a service worker, claims clients, and routes matching fetches through its proxy runtime.
- Package contents are a browser proxy application, not an SVG library.
Evidence against
- No npm lifecycle scripts or Node entrypoints are declared.
- No credential harvesting, shell execution, or concrete third-party exfiltration endpoint was confirmed.
Behavioral surface
ChildProcessDynamicRequireFilesystemNetworkWebSocket
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourceassets/livekit-DqpdvE-G-9e93a8da.jsView file
13patternName = generic_password
severity = medium
line = 13
matchedText = `},e.par...+`\r
Medium
Secret Pattern
Package contains a possible secret pattern.
assets/livekit-DqpdvE-G-9e93a8da.jsView on unpkg · L13assets/motion-ClYBgd9J-9e93a8da.jsView file
8}
L9: `),()=>{var C;(C=a.current)==null||C.removeAttribute("data-motion-pop-id"),P.contains(V)&&P.removeChild(V)}},[e]),z.jsx(Ic,{isPresent:e,childRef:a,sizeRef:l,pop:r,children:r===!1?t...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
assets/motion-ClYBgd9J-9e93a8da.jsView on unpkg · L8assets/index-iwSJRUIT-9e93a8da.jsView file
Findings
3 High6 Medium4 Low
HighObfuscated Payload Loaderassets/index-iwSJRUIT-9e93a8da.js
HighObfuscated
HighKnown Malware Source Similarityassets/fingerprint-Y5nV5FVa-9e93a8da.js
MediumSecret Patternassets/livekit-DqpdvE-G-9e93a8da.js
MediumDynamic Requireassets/motion-ClYBgd9J-9e93a8da.js
MediumNetwork
MediumProtestware
MediumShips Wasm Moduleikkrp/qpo2lx.wasm
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @lucideproxy/svg@0.0.41.
See all versions of @lucideproxy/svg for other recorded verdicts.
- Review the evidence and your use of @lucideproxy/svg@0.0.41 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.