registry / @lucideproxy/svg / 0.0.60
@lucideproxy/svg@0.0.60
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not a normal SVG package: its executable SVG launches an obfuscated service-worker proxy. The absence of install hooks and confirmed theft supports a warning rather than a malware block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A user opens or embeds index.svg in a browser context that permits its scripts.
Impact
The package can provide opaque browser-based traffic proxying and retain control of requests within its service-worker scope.
Mechanism
An embedded web application registers a service worker that intercepts and proxies routed requests.
AI rationale
This is not a normal SVG package: its executable SVG launches an obfuscated service-worker proxy. The absence of install hooks and confirmed theft supports a warning rather than a malware block.
Evidence
package.jsonindex.svgassets/boot-BSQA3qlB-8ac1fed7.js1kawmo.jslob5r/zzfvmn.jslob5r/g8nrlb.wasm
Network endpoints2
www.googletagmanager.com/gtag/js?id=G-0VL3ZSBXDHcdn.jsdelivr.net/gh/lucideproxy/svg@main/branding/lucide.png
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The declared SVG is an executable HTML document inside foreignObject, not an icon asset.
- Opening the SVG loads two opaque bundles and dynamically imports the application.
- The browser application registers a service worker.
- The service worker intercepts routed fetches and forwards them to its proxy router.
- The package ships an opaque proxy runtime and WebAssembly module despite having no normal SVG exports.
Evidence against
- The manifest contains no npm lifecycle scripts or Node entry point.
- The proxy activates only when a user opens the bundled SVG or site; installation alone does not run it.
- No source evidence showed local credential harvesting, shell execution, or npm-project mutation.
Behavioral surface
ChildProcessDynamicRequireFilesystemNetworkWebSocket
HighEntropyStringsMinifiedObfuscatedProtestware
Source & flagged code
5 flagged · loading sourceassets/livekit-DqpdvE-G-8ac1fed7.jsView file
13patternName = generic_password
severity = medium
line = 13
matchedText = `},e.par...+`\r
Medium
Secret Pattern
Package contains a possible secret pattern.
assets/livekit-DqpdvE-G-8ac1fed7.jsView on unpkg · L13lob5r/zzfvmn.jsView file
17L18: //# sourceURL=${A}`)();n=c,s=l}else n=g.z$,s=g.Mt;r.construct&&(l.construct=function(e,t,i){let n,o=!1,a={fn:e,this:null,args:t,newTarget:i,return:e=>{o=!0,n=e},call:()=>(o=!0,n=s(...
L19: //# sourceURL=${r.url.href}`),n}return s.body;case"style":return(0,i.sM)(await s.text(),e.context,r.meta);case"sharedworker":case"worker":return(0,i.iP)(new Uint8Array(await s.arra...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
lob5r/zzfvmn.jsView on unpkg · L17assets/EmojiPickerPopover-B0pHTQ1B-8ac1fed7.jsView file
Findings
3 High6 Medium4 Low
HighObfuscated Payload Loaderassets/EmojiPickerPopover-B0pHTQ1B-8ac1fed7.js
HighObfuscated
HighKnown Malware Source Similarityassets/fingerprint-Y5nV5FVa-8ac1fed7.js
MediumSecret Patternassets/livekit-DqpdvE-G-8ac1fed7.js
MediumDynamic Requirelob5r/zzfvmn.js
MediumNetwork
MediumProtestware
MediumShips Wasm Modulelob5r/g8nrlb.wasm
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @lucideproxy/svg@0.0.60.
See all versions of @lucideproxy/svg for other recorded verdicts.
- Review the evidence and your use of @lucideproxy/svg@0.0.60 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.