@lucideproxy/svg@0.0.48
AI Security Review
scanned 2mo ago · by lpm-firewall-aiWarn: the package ships an obfuscated executable web-proxy payload with runtime compilation, but no concrete malicious chain executes on npm install. The lack of a normal library entrypoint and opaque browser behavior leave material unresolved risk.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A browser opens index.svg or index.html.
Impact
Unreviewable browser-side code can proxy user browsing and handle proxied-session cookies.
Mechanism
Obfuscated static proxy application with runtime compilation and service-worker cookie transport.
AI rationale
Warn: the package ships an obfuscated executable web-proxy payload with runtime compilation, but no concrete malicious chain executes on npm install. The lack of a normal library entrypoint and opaque browser behavior leave material unresolved risk.
Evidence
package.jsonindex.svgindex.htmlassets/index-dLWOVsMH-5c35ebe4.jsc6cuw/iryiv5.jsc6cuw/hf699n.jsmlzzl/gpbljz.jsmlzzl/yeuen4.wasm
Network endpoints2
cdn.jsdelivr.net/gh/lucideproxy/svg@main/branding/lucide.pngwww.googletagmanager.com/gtag/js?id=G-0VL3ZSBXDH
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- index.svg executes a bundled browser application when opened.
- Main bundle is heavily obfuscated and uses new Function for runtime code execution.
- Proxy scripts handle service-worker cookie messages and a WASM payload.
Evidence against
- package.json has no lifecycle scripts, bin, or Node entrypoint.
- No source-confirmed credential theft, host-file access, or install-time action found.
- Observed external URLs are CDN/analytics resources, not a confirmed exfiltration endpoint.
Behavioral surface
ChildProcessDynamicRequireFilesystemNetworkWebSocket
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourceassets/livekit-DqpdvE-G-5c35ebe4.jsView file
13patternName = generic_password
severity = medium
line = 13
matchedText = `},e.par...+`\r
Medium
Secret Pattern
Package contains a possible secret pattern.
assets/livekit-DqpdvE-G-5c35ebe4.jsView on unpkg · L13mlzzl/gpbljz.jsView file
17L18: //# sourceURL=${A}`)();n=c,o=l}else n=g.z$,o=g.Mt;r.construct&&(l.construct=function(e,t,i){let n,s=!1,a={fn:e,this:null,args:t,newTarget:i,return:e=>{s=!0,n=e},call:()=>(s=!0,n=o(...
L19: //# sourceURL=${r.url.href}`),n}return o.body;case"style":return(0,i.sM)(await o.text(),e.context,r.meta);case"sharedworker":case"worker":return(0,i.iP)(new Uint8Array(await o.arra...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
mlzzl/gpbljz.jsView on unpkg · L17assets/index-dLWOVsMH-5c35ebe4.jsView file
Findings
3 High6 Medium4 Low
HighObfuscated Payload Loaderassets/index-dLWOVsMH-5c35ebe4.js
HighObfuscated
HighKnown Malware Source Similarityassets/fingerprint-Y5nV5FVa-5c35ebe4.js
MediumSecret Patternassets/livekit-DqpdvE-G-5c35ebe4.js
MediumDynamic Requiremlzzl/gpbljz.js
MediumNetwork
MediumProtestware
MediumShips Wasm Modulemlzzl/yeuen4.wasm
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @lucideproxy/svg@0.0.48.
See all versions of @lucideproxy/svg for other recorded verdicts.
- Review the evidence and your use of @lucideproxy/svg@0.0.48 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.