registry / Data exfiltration / @vervedoc/core
@vervedoc/core
VerveDoc Core 核心编辑器库（Canvas 2D 高性能实现）
This report shows the evidence for @vervedoc/core@3.3.11. 1 of 6 known versions is blocked or flagged. The newest version, 3.3.18, is allowed. See all versions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged clipboard behavior is ordinary user-triggered copy and paste, but dist/core.js also sends runtime editor and display data to a hard-coded private-network endpoint. This unrelated, undisclosed telemetry meets the malicious data-exfiltration rule.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Calling setScale, or ending text composition while the editor is readonly or disabled.
Impact
The package sends runtime telemetry to a hard-coded endpoint unrelated to the editor’s documented service, without a consent or configuration check.
Mechanism
dist/core.js makes HTTP POST requests to 192.168.3.37:7777/event with editor state and rendering or viewport metrics.
Attack narrative
When the editor changes scale, or composition ends while it is readonly or disabled, the package posts editor state and display metrics to a fixed private-network collector. The endpoint is hard-coded and the code has no consent or configuration check, so this is undisclosed runtime telemetry sent to an unrelated collector.
AI rationale
The flagged clipboard behavior is ordinary user-triggered copy and paste, but dist/core.js also sends runtime editor and display data to a hard-coded private-network endpoint. This unrelated, undisclosed telemetry meets the malicious data-exfiltration rule.
Evidence
dist/core.js
Network endpoints1
192.168.3.37:7777/event
Decision evidence
public snapshotAI called this Malicious at 94.0% confidence as Malware with low false-positive risk.
Evidence for block
- dist/core.js posts editor scale, viewport, page and display metrics to the hard-coded endpoint 192.168.3.37:7777/event when setScale runs.
- On compositionend, when the editor is readonly or disabled, dist/core.js posts readonly/disabled state and whether input text exists to the same endpoint.
- package.json exposes dist/core.js as the package’s import entry point.
Evidence against
- The clipboard code uses clipboard reads for paste and writes for copy/cut; the inspected flow does not show wallet-address replacement.
- The manifest declares no lifecycle scripts. The network calls are runtime event handlers, not install hooks.
Behavioral surface
Network
HighEntropyStringsMinifiedUrlStrings
Oversized source lightweight scan
Source & flagged code
6 flaggeddist/core.umd.cjsView file
1(function(){"use strict";try{if(typeof document<"u"){var p=document.createElement("style");p.id="vervedoc-core-style",p.appendChild(document.createTextNode('@font-face{font-family:...
L2: (function(W,Rt){typeof exports=="object"&&typeof module<"u"?Rt(exports):typeof define=="function"&&define.amd?define(["exports"],Rt):(W=typeof globalThis<"u"?globalThis:W||self,Rt(...
L3: `&&this.measure.charWidth(B[H],D,ft,nt,k)>Mt){bt(!1);continue}let rt=0,st=0;for(let Ct=H;Ct<B.length;Ct++){const ae=B[Ct],oe=this.measure.charWidth(ae,D,ft,nt,k);if(ae===`
...
L354: </div>
L355: `;class Qi{constructor(){O(this,"root",null);O(this,"onCommand",null)}setDeps(t){this.onCommand=t.onCommand}show(){this.hide();const t=document.createElement("div");t.innerHTML=Zi,...
L356: @page{margin:0}${s}
...
L412: %%EOF
Critical
Clipboard Crypto Hijack
Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.
dist/core.umd.cjsView on unpkg · L1•Trigger-reachable chain: manifest.main -> dist/core.umd.cjs
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/core.umd.cjsView on unpkgdist/core.js
Findings
2 Critical3 High3 Medium3 Low
CriticalClipboard Crypto Hijackdist/core.umd.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/core.umd.cjs
HighAi Review Evidencedist/core.js
HighAi Review Evidencedist/core.js
HighAi Review Evidencepackage.json
MediumNetwork
MediumOversized Source Filedist/core.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @vervedoc/core@3.3.11.
The versions list below shows the verdict for each recorded version.
- Avoid installing @vervedoc/core@3.3.11. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.