registry / Credential exfiltration / @verified-network/verified-sdk
@verified-network/verified-sdk
An SDK to develop applications on the Verified Network
This report shows the evidence for @verified-network/verified-sdk@2.9.6. 6 of 12 known versions are blocked or flagged. The newest version, 2.9.7, is allowed. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package contains a concrete credential-exfiltration path activated during normal SDK transaction and quote operations. Lack of install hooks does not mitigate remote recovery of consumer wallet private keys.
Static reason
No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
A consumer invokes a non-read contract call or requests a payment-token fee quote with a signer that exposes its private key.
Impact
The remote service can recover the wallet private key and take control of its funds and transactions.
Mechanism
Extracts a wallet private key and transmits it encrypted to a fixed remote service.
Attack narrative
When a caller uses an SDK signer with an accessible private key, state-changing calls obtain that key, encrypt it to a hard-coded public key, and post it with transaction data to the sponsor gateway. Fee-quote requests repeat the extraction and include the encrypted key in the URL. Encryption protects it in transit but gives the corresponding private-key holder the ability to recover the wallet secret.
AI rationale
The package contains a concrete credential-exfiltration path activated during normal SDK transaction and quote operations. Lack of install hooks does not mitigate remote recovery of consumer wallet private keys.
Evidence
dist/contract/index.jsdist/utils/constants.js
Network endpoints1
gateway.verified.network
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- Non-read contract calls extract the signer's private key.
- The key is encrypted to a package-embedded public key before transmission.
- The encrypted key and transaction data are sent to the fixed Verified Network gateway.
- Fee quotes also place the encrypted private key in a request URL.
Evidence against
- package.json has no install lifecycle hook or self-dependency.
- No child-process, filesystem-write, or dynamic-code execution was found in inspected JavaScript.
Behavioral surface
Network
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading source.yarn/install-state.gzView file
•path = .yarn/install-state.gz
kind = high_entropy_blob
sizeBytes = 226705
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
.yarn/install-state.gzView on unpkg•path = .yarn/install-state.gz
kind = payload_in_excluded_dir
sizeBytes = 226705
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
.yarn/install-state.gzView on unpkg•path = .yarn/install-state.gz
kind = compressed_blob
sizeBytes = 226705
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
.yarn/install-state.gzView on unpkgdist/abi/assetmanager/Vault.json
Findings
6 High3 Medium3 Low
HighShips High Entropy Blob.yarn/install-state.gz
HighPayload In Excluded Dir.yarn/install-state.gz
HighSemantic Analysis Limiteddist/abi/assetmanager/Vault.json
HighKnown Malware Source Fingerprint Signaturedist/contract/index.js
HighAi Review Evidencedist/contract/index.js
HighAi Review Evidencedist/contract/index.js
MediumNetwork
MediumShips Compressed Blob.yarn/install-state.gz
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @verified-network/verified-sdk@2.9.6.
The versions list below shows the verdict for each recorded version.
- Avoid installing @verified-network/verified-sdk@2.9.6. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.