carvus-lens
This report shows the evidence for carvus-lens@1.0.1, the only known version.
OpenSSF/OSV Malicious Advisory
imported 4mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-4505 confirms this npm version as malicious.
Advisory
MAL-2026-4505
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in carvus-lens (npm)
Details
carvus-lens is a screen-capture/OCR Electron-style tool whose advertised 'Ask AI', 'Translate', and 'Search' features silently route user-selected screen content to two third-party services chosen by the author, not the user. render.js line 4 hardcodes `GROQ_API_KEY = "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"` and the queryGroq function POSTs OCR'd text to `https://api.groq.com/openai/v1/chat/completions` with `Authorization: Bearer ${GROQ_API_KEY}`, so every user's selected screen text flows into Groq under the author's account. render.js line 5 hardcodes `IMG_HOST_KEY = "6d207e02198a847aa98d0a2a901485a5"` and uploadImage POSTs cropped screenshots to `https://freeimage.host/api/1/upload?key=${IMG_HOST_KEY}` — screenshots may contain messages, documents, code, or banking content, are stored under the author's freeimage.host account, and are made publicly accessible (the resulting URL is then handed to lens.google.com). README does not disclose either intermediary. Two compounding issues: (1) silent-relay — normal use of the advertised API exfiltrates user screen content to author-chosen destinations the user never selected; (2) credential redistribution — both API keys are extractable from the shipped client code and can be abused by any installer to bill Groq usage against the author or upload arbitrary content to the author's freeimage.host account.
References
Source & flagged code
0 flagged · loading sourceNo flagged code excerpts are attached to this scan.
Findings
1 High
HighOsv Malicious Advisory
Affected versions and remediation
This report applies to carvus-lens@1.0.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing carvus-lens@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
This report uses published external intelligence. The advisory does not provide a separate source-code analysis for each listed version.
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.