eve: Suspicious npm security report (Warn)

Loading npm security reports…

eve: Suspicious npm security report (Warn) | LPM Firewall

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The manifest registers a built-in self-modification extension.
In development mode, the extension creates an agent intended to change authored source.
The extension mounts the consumer project's agent directory as writable source.
The registry tool can fetch an integration index and install a selected item after one approval.

Evidence against

package.json has no preinstall, install, or postinstall hook.
The self-modification agent is guarded by EVE_DEV=1.
The registry installer is limited to eve dev and uses an approval gate.
The reported host fingerprint is a Vercel OIDC user-agent in vendored code, not a package-wide collection routine.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,556 file(s), 12.4 MB of source, external domains: 127.0.0.1, adaptivecards.io, ai-gateway.vercel.sh, ai.google.dev, ai.todoist.net, api-ssl.bitly.com, api.anthropic.com, api.botframework.com, api.brex.com, api.browser-use.com, api.github.com, api.linear.app, api.linqapp.com, api.notion.com, api.openai.com, api.oreilly.com, api.telegram.org, api.twilio.com, api.vercel.com, app.photon.codes, asset-management.mcp.cloudinary.com, chatgpt.com, coda.io, connect.vercel.com, developers.notion.com, discord.com, docs.cloud.google.com, docs.slack.dev, eve.dev, eve.invalid, eve.local, example.com, generativelanguage.googleapis.com, github.com, google.aip.dev, huggingface.co, json-schema.org, json.schemastore.org, login.botframework.com, login.microsoftonline.com, mcp-server.egnyte.com, mcp-server.zomato.com, mcp.agentcard.sh, mcp.airtable.com, mcp.candid.org, mcp.clickhouse.cloud, mcp.context.dev, mcp.datadoghq.com, mcp.honeycomb.io, mcp.linear.app

Oversized source lightweight scan

dist/src/compiled/@photon-ai/chat-adapter-imessage/index.js2.17 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsMinified

dist/src/compiled/shadcn-registry/index.js9.31 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsMinifiedUrlStringsui.shadcn.com

Source & flagged code

15 flagged

dist/src/compiled/@vercel/blob/index.jsView file

28patternName = private_key_rsa severity = critical line = 28

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/src/compiled/@vercel/blob/index.jsView on unpkg · L28

28patternName = private_key_rsa severity = critical line = 28

Critical

Secret Pattern

RSA private key in dist/src/compiled/@vercel/blob/index.js

dist/src/compiled/@vercel/blob/index.jsView on unpkg · L28

bin/eve.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

3import { spawn } from "node:child_process";

4import { access, readdir, realpath, stat } from "node:fs/promises";

High

Child Process

Package source references child process execution.

bin/eve.jsView on unpkg · L2

5import { createRequire } from "node:module";

6import { dirname, resolve } from "node:path";

7import { fileURLToPath, pathToFileURL } from "node:url";

9const require = createRequire(import.meta.url);

10const packageJson = require("../package.json");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/eve.jsView on unpkg · L8

11const packageNodeEngine = packageJson.engines?.node;

12const bootstrapPackageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");

13let semverPromise;

15if (typeof packageNodeEngine !== "string") {

16 throw new Error("eve package.json must declare a valid engines.node range.");

17}

19function createBootstrapOptions(overrides = {}) {

20 const packageRoot = overrides.packageRoot ?? bootstrapPackageRoot;

22 return {

23 cliEntrypointPath:

24 overrides.cliEntrypointPath ?? resolve(packageRoot, "dist", "src", "cli", "run.js"),

25 packageRoot,

26 postBuildScriptPaths: overrides.postBuildScriptPaths ?? [

27 resolve(packageRoot, "scripts", "copy-compiled-assets.mjs"),

28 resolve(packageRoot, "scripts", "copy-runtime-assets.mjs"),

2Cross-file remote execution chain: bin/eve.js spawns dist/src/compiled/@agentclientprotocol/sdk/index.js; helper contains network access plus dynamic code execution. L2: L3: import { spawn } from "node:child_process"; L4: import { access, readdir, realpath, stat } from "node:fs/promises"; ... L9: const require = createRequire(import.meta.url); L10: const packageJson = require("../package.json"); L11: const packageNodeEngine = packageJson.engines?.node; ... L354: } L355: process.exitCode = 1; L356: } finally {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/eve.jsView on unpkg · L2

dist/src/compiled/gray-matter/index.jsView file

Lines 23-48javascript

23`,o?1+l:l)):u?(u=!1,e.result+=n.repeat(`

24`,l+1)):l===0?o&&(e.result+=` `):e.result+=n.repeat(`

25`,l):e.result+=n.repeat(`

26`,o?1+l:l),o=!0,s=!0,l=0,r=e.position;!x(h)&&h!==0;)h=e.input.charCodeAt(++e.position);I(e,r,e.position,!1)}return!0}function J(e,t){var n,r=e.tag,i=e.anchor,a=[],o,s=!1,c;for(e.anchor!==null&&(e.anchorMap[e.anchor]=a),c=e.input.charCodeAt(e.position);c!==0&&!(c!==45||(o=e.input.charCodeAt(e.position+1),!C(o)));){if(s=!0,e.position++,B(e,!0,-1)&&e.lineIndent<=t){a.push(null),c=e.input.charCodeAt(e.position);continue}if(n=e.line,Z(e,t,u,!1,!0),a.push(e.result),B(e,!0,-1),c=e.input.charCodeAt(e.position),(e.line===n||e.lineIndent>t)&&c!==0)N(e,`bad indentation of a sequence entry`);else if(e.lin ...

27`),e.charCodeAt(

dist/src/compiled/@workflow/core/runtime.jsView file

Lines 1-3javascript

dist/src/internal/authored-module-loader.jsView file

Lines 1-4javascript

1import{createHash}from"node:crypto";import{expectObjectRecord}from"#internal/authored-module.js";import{dirname,join,relative,resolve,sep}from"node:path";import{resolvePackageSourceFilePath}from"#internal/application/package.js";import{existsSync,mkdirSync,realpathSync,writeFileSync}from"node:fs";import

dist/src/compiled/@ai-sdk/code-mode/index.jsView file

649\`)}catch(i){throw B(k(t,i))}let s=t.newObject(),o=[["log",de(t,"console.log","stdout",r,n)],["info",de(t,"console.info","stdout",r,n)],["debug",de(t,"console.debug","stdout",r,n)]... L650: \`,l=Buffer.byteLength(u);return l>n.remainingBytes?(n.remainingBytes=0,t.undefined):(n.remainingBytes-=l,it(r==="stderr"?2:1,u),t.undefined)})}function er(t,e,r,n){let s=t.newNumb... L651: ${e} ... L658: }`:s}function Ei(e,t){let n=e.items;if(Array.isArray(n))return`[${n.map(e=>$(e)?Z(e,Q(t)):`unknown`).join(`, `)}]`;if($(n)){let e=Z(n,Q(t));return Pi(e)||e.includes(` L659: `)?`Array<${e}>`:`${e}[]`}return`unknown[]`}function Di(e,t){return Oi(e,{root:t,seenRefs:new Set,depth:0})}function Oi(e,t){if(t.depth>8)return null;if(e.default!==void 0)return e... L660: `))return e;let n=` `.repeat(t);retu

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/compiled/@ai-sdk/code-mode/index.jsView on unpkg · L649

dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.jsView file

Lines 1-21javascript

1import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=

dist/src/compiled/@vercel/sandbox/index.jsView file

1import{o as e}from"../../_chunks/node/rolldown-runtime-DaDcL9Zw.js";import{n as t,t as n}from"../../_chunks/node/dist-DsNhwdzf.js";import{n as r}from"../../_chunks/node/retry-qwFNG... L2: `):t;let n=t.replace(/^/gm,`${gt} `);console.error(ht[e](n))}function _t(e){return I.default.italic(I.default.dim("`")+e+I.default.dim("`"))}var vt=e(r(),1);async function yt(){ret... L3: `));if(e.teamId&&e.projectId)return{token:o.token,teamId:e.teamId,projectId:e.projectId};let s=await a({teamId:e.teamId,token:o.token});return s.created&&L(`info`,`Created default ... ... L7: `).filter(Boolean).map(t=>Wt(t,e))}let n=await this.sandbox.runCommand(`ls`,[`-1`,e],{signal:t?.signal});if(n.exitCode!==0){let t=await n.stderr();throw t.includes(`No such file or... L8: `).filter(Boolean)}async stat(e,t){"use

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/compiled/@vercel/sandbox/index.jsView on unpkg · L1

dist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.jsView file

1var e=`vercel.ai.error`,t=Symbol.for(e),n,r,i=class i extends (r=Error,n=t,r){constructor({name:e,message:t,cause:r}){super(t),this[n]=!0,this.name=e,this.cause=r}static isInstance... L2: Error message: ${g(t)}`,cause:t}),this[Se]=!0,this.text=e}static isInstance(e){return i.hasMarker(e,be)}},Te=`AI_LoadAPIKeyError`,Ee=`vercel.ai.error.${Te}`,De=Symbol.for(Ee),Oe,ke... L3: Error message: ${g(t)}`,cause:t}),this[Qe]=!0,this.value=e,this.context=n}static isInstance(e){return i.hasMarker(e,Xe)}static wrap({value:t,cause:n,context:r}){return e.isInstance... L4: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ... L5: `)}\n};`)(...Object.values(this.closed))}};c

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.jsView on unpkg · L1

dist/src/compiled/shadcn-registry/index.jsView file

•path = dist/src/compiled/shadcn-registry/index.js kind = oversized_source_file sizeBytes = 9760341 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/compiled/shadcn-registry/index.jsView on unpkg

dist/src/compiled/@photon-ai/chat-adapter-imessage/index.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/compiled/@photon-ai/chat-adapter-imessage/index.jsView on unpkg

Source & flagged code

15 flagged · loading source

dist/src/compiled/@vercel/blob/index.jsView file

28patternName = private_key_rsa severity = critical line = 28

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/src/compiled/@vercel/blob/index.jsView on unpkg · L28

28patternName = private_key_rsa severity = critical line = 28

Critical

Secret Pattern

RSA private key in dist/src/compiled/@vercel/blob/index.js

dist/src/compiled/@vercel/blob/index.jsView on unpkg · L28

bin/eve.jsView file

2L3: import { spawn } from "node:child_process"; L4: import { access, readdir, realpath, stat } from "node:fs/promises";

High

Child Process

Package source references child process execution.

bin/eve.jsView on unpkg · L2

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/eve.jsView on unpkg · L2

8L9: const require = createRequire(import.meta.url); L10: const packageJson = require("../package.json");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/eve.jsView on unpkg · L8

dist/src/compiled/gray-matter/index.jsView file

43return `+str.trim()+`; L44: }());`),eval(str)||{}}catch(e){if(wrap!==!1&&/(unexpected|identifier)/i.test(e.message))return parse(str,options,!1);throw SyntaxError(e)}},stringify:function(){throw Error(`string... L45: `?e:e+`

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/compiled/gray-matter/index.jsView on unpkg · L43

dist/src/compiled/@workflow/core/runtime.jsView file

1import{a as e,i as t,t as n}from"../../_chunks/workflow/rolldown-runtime-8V8biNmG.js";import{t as r}from"../../_chunks/workflow/global-singleton-BNinwFrL.js";import{$ as i,$t as a,... L2: `).map(e=>{let n=e.match(/^\s*at\s+(?:(.+?)\s+$)?(.+?):(\d+):(\d+)$?$/);if(!n)return e;let[,i,a,o,s]=n;if(!a.includes(t))return e;let c=parseInt(o,10),l=parseInt(s,10),u=to(r,{li...

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/src/compiled/@workflow/core/runtime.jsView on unpkg · L1

dist/src/internal/authored-module-loader.jsView file

3`).filter(e=>!e.startsWith(`//#region `)&&e!==`//#endregion`).join(` L4: `)}async function loadBundledAuthoredModule(t,n){let i=await bundleAuthoredModuleCode(t,n),a=normalizeExternalDependencies(n.externalDependencies),o=createHash(`sha1`).update(t).up...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/internal/authored-module-loader.jsView on unpkg · L3

dist/src/compiled/@ai-sdk/code-mode/index.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/compiled/@ai-sdk/code-mode/index.jsView on unpkg · L649

dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.jsView file

1import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=... L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON.... L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),b=t(((t,n)=>{let r=e(`path`),i=u(),a=e=>{e=... L4: `);return _?(a.originalMessage=a.message,a.message=y):a=Error(y),a.shortMessage=v,a.command=c,a.escapedCommand=l,a.exitCode=s,a.signal=o,a.signalDescription=m,a.stdout=e,a.stderr=t... L5: `)}})),q=t((e=>{var t=e&&e.__createBinding||

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.jsView on unpkg · L1

High

Command Output Exfiltration

dist/src/compiled/@vercel/sandbox/index.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/compiled/@vercel/sandbox/index.jsView on unpkg · L1

dist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.jsView on unpkg · L1

dist/src/compiled/shadcn-registry/index.jsView file

•path = dist/src/compiled/shadcn-registry/index.js kind = oversized_source_file sizeBytes = 9760341 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/compiled/shadcn-registry/index.jsView on unpkg

dist/src/compiled/@photon-ai/chat-adapter-imessage/index.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/compiled/@photon-ai/chat-adapter-imessage/index.jsView on unpkg

Source & flagged code

15 flagged

dist/src/compiled/@vercel/blob/index.jsView file

28patternName = private_key_rsa severity = critical line = 28

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/src/compiled/@vercel/blob/index.jsView on unpkg · L28

28patternName = private_key_rsa severity = critical line = 28

Critical

Secret Pattern

RSA private key in dist/src/compiled/@vercel/blob/index.js

dist/src/compiled/@vercel/blob/index.jsView on unpkg · L28

bin/eve.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

3import { spawn } from "node:child_process";

4import { access, readdir, realpath, stat } from "node:fs/promises";

High

Child Process

Package source references child process execution.

bin/eve.jsView on unpkg · L2

5import { createRequire } from "node:module";

6import { dirname, resolve } from "node:path";

7import { fileURLToPath, pathToFileURL } from "node:url";

9const require = createRequire(import.meta.url);

10const packageJson = require("../package.json");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/eve.jsView on unpkg · L8

11const packageNodeEngine = packageJson.engines?.node;

12const bootstrapPackageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");

13let semverPromise;

15if (typeof packageNodeEngine !== "string") {

16 throw new Error("eve package.json must declare a valid engines.node range.");

17}

19function createBootstrapOptions(overrides = {}) {

20 const packageRoot = overrides.packageRoot ?? bootstrapPackageRoot;

22 return {

23 cliEntrypointPath:

24 overrides.cliEntrypointPath ?? resolve(packageRoot, "dist", "src", "cli", "run.js"),

25 packageRoot,

26 postBuildScriptPaths: overrides.postBuildScriptPaths ?? [

27 resolve(packageRoot, "scripts", "copy-compiled-assets.mjs"),

28 resolve(packageRoot, "scripts", "copy-runtime-assets.mjs"),

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/eve.jsView on unpkg · L2

dist/src/compiled/gray-matter/index.jsView file

Lines 23-48javascript

23`,o?1+l:l)):u?(u=!1,e.result+=n.repeat(`

24`,l+1)):l===0?o&&(e.result+=` `):e.result+=n.repeat(`

25`,l):e.result+=n.repeat(`

27`),e.charCodeAt(

dist/src/compiled/@workflow/core/runtime.jsView file

Lines 1-3javascript

dist/src/internal/authored-module-loader.jsView file

Lines 1-4javascript

dist/src/compiled/@ai-sdk/code-mode/index.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/compiled/@ai-sdk/code-mode/index.jsView on unpkg · L649

dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.jsView file

Lines 1-21javascript

1import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=

dist/src/compiled/@vercel/sandbox/index.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/compiled/@vercel/sandbox/index.jsView on unpkg · L1

dist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.jsView on unpkg · L1

dist/src/compiled/shadcn-registry/index.jsView file

•path = dist/src/compiled/shadcn-registry/index.js kind = oversized_source_file sizeBytes = 9760341 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/compiled/shadcn-registry/index.jsView on unpkg

dist/src/compiled/@photon-ai/chat-adapter-imessage/index.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/compiled/@photon-ai/chat-adapter-imessage/index.jsView on unpkg

eve@0.51.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code