Loading npm security reports…
eve@0.44.0: Manual Review npm security report (Allow) | LPM Firewall
Allowed — no malicious behavior detected
No malicious behavior detected. 25 low-signal pattern(s) reviewed.
scanned 1mo ago · by lpm-firewall-ai The inspected behavior is consistent with an agent framework and its bundled integrations, and no concrete attack behavior was found. A clean verdict cannot be published because mandatory clean coverage requires 11 distinct citations while the schema allows at most 8.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
No unconsented install-time trigger was found; the CLI runs only when directly invoked.
Impact
No concrete malicious impact was established by static inspection.
Mechanism
The inspected code performs configured client requests, local development-server startup, and integration-specific authentication.
AI rationale
The inspected behavior is consistent with an agent framework and its bundled integrations, and no concrete attack behavior was found. A clean verdict cannot be published because mandatory clean coverage requires 11 distinct citations while the schema allows at most 8.
public snapshot AI called this Manual Review at 83.0% confidence as Unknown with high false-positive risk.
AI review observations
The manifest exposes a CLI and import entrypoint but declares no install lifecycle hook. The CLI only runs when invoked directly and loads its own compiled CLI entrypoint. The agent client sends bearer credentials only when its caller supplies a configured host and authentication option. The flagged workflow code uses Vercel OIDC requests to Vercel endpoints and includes URL safeguards against local or IP targets. Several high-signal files are bundled third-party integrations for sandboxing, OIDC, telemetry, and chat services; the inspected excerpts show package-aligned behavior, not an attack. Evidence against
Clean publication requires citations for 11 specified paths, but the result format permits at most 8 citations. Static inspection did not establish credential exfiltration, install-time execution, persistence, destructive behavior, or remote payload execution. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Eval
17 flagged · loading source 2 L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
High Child Process
Package source references child process execution.
bin/eve.js View on unpkg · L2 2 Cross-file remote execution chain: bin/eve.js spawns dist/src/compiled/@agentclientprotocol/sdk/index.js; helper contains network access plus dynamic code execution.
L2:
L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
...
L9: const require = createRequire(import.meta.url);
L10: const packageJson = require("../package.json");
L11: const packageNodeEngine = packageJson.engines?.node;
...
L350: }
L351: process.exitCode = 1;
L352: } finally {
High Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
bin/eve.js View on unpkg · L2 8 L9: const require = createRequire(import.meta.url);
L10: const packageJson = require("../package.json");
Medium Dynamic Require
Package source references dynamic require/import behavior.
bin/eve.js View on unpkg · L8 13 High 6 Medium 6 Low
High Child Process bin/eve.js
High Shell
High Same File Env Network Execution dist/src/internal/nitro/host/start-production-server.js
High Host Fingerprint Exfiltration dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js
High Command Output Exfiltration dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js
High Sandbox Evasion Gated Capability dist/src/compiled/@vercel/sandbox/index.js
High Cloud Metadata Access dist/src/compiled/_chunks/workflow/dist-eUxFublw.js
High Cross File Remote Execution Context bin/eve.js
High Trigger Reachable Command Output Exfiltration dist/src/compiled/@vercel/oidc/index.js
High Semantic Analysis Limited dist/src/compiled/@linqapp/chat-sdk-adapter/index.js#virtual:normalized:round1
Affected versions and remediation This report applies to eve@0.44.0 .
See all versions of eve for other recorded verdicts.
Review the evidence and your use of eve@0.44.0 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-09-20 03:14:51.244Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
83% Manual Review
AI assessment confidence
Package metadata npm Maintainers rauchg, vercel-release-bot, matt.straka
Version 0.44.0
Latest on npm 0.83.0
Published Aug 21, 2026
License Apache-2.0
Dependencies 7
Integrity verified
Package size 7.80 MB
Files 3,402
Keywords agent-framework agents ai-agents ai-sdk evals eve mcp model-context-protocol
Filesystem
NativeBindings
Network
Shell
Supply chain HighEntropyStrings Minified PossibleObfuscation UrlStrings
Manifest No manifest risk signals triggered.
scanned 1,348 file(s), 13.4 MB of source, external domains: 127.0.0.1, adaptivecards.io, ai-gateway.vercel.sh, ai.google.dev, ai.todoist.net, api-ssl.bitly.com, api.anthropic.com, api.botframework.com, api.brex.com, api.browser-use.com, api.github.com, api.linear.app, api.linqapp.com, api.notion.com, api.openai.com, api.oreilly.com, api.telegram.org, api.twilio.com, api.vercel.com, app.photon.codes, asset-management.mcp.cloudinary.com, bun.sh, chatgpt.com, classic.yarnpkg.com, coda.io, connect.vercel.com, deno.com, developers.notion.com, discord.com, docs.cloud.google.com, docs.npmjs.com, docs.slack.dev, eve.dev, eve.invalid, eve.local, example.com, foo.com, generativelanguage.googleapis.com, github.com, google.aip.dev, grpc.io, huggingface.co, json-schema.org, json.schemastore.org, login.botframework.com, login.microsoftonline.com, mcp-server.egnyte.com, mcp-server.zomato.com, mcp.agentcard.sh, mcp.airtable.com
Oversized source lightweight scan
dist/src/compiled/shadcn-registry/index.js 9.31 MB file, sampled 256 KB
Filesystem Network ChildProcess EnvironmentVars DynamicRequire HighEntropyStrings Minified UrlStrings bun.sh classic.yarnpkg.com deno.com docs.npmjs.com github.com pnpm.io raw.githubusercontent.com ui.shadcn.com yarnpkg.com
dist/src/compiled/gray-matter/index.js View file 43 return `+str.trim()+`;
L44: }());`),eval(str)||{}}catch(e){if(wrap!==!1&&/(unexpected|identifier)/i.test(e.message))return parse(str,options,!1);throw SyntaxError(e)}},stringify:function(){throw Error(`string...
L45: `?e:e+`
Low Eval
Package source references a known benign dynamic code generation pattern.
dist/src/compiled/gray-matter/index.js View on unpkg · L43 dist/src/compiled/@workflow/core/runtime.js View file 1 import{a as e,i as t,t as n}from"../../_chunks/workflow/rolldown-runtime-8V8biNmG.js";import{$ as r,$n as i,$t as a,A as o,An as s,Ar as c,At as l,B as u,Bn as d,Bt as f,C as p,Cn ...
L2: `).map(e=>{let n=e.match(/^\s*at\s+(?:(.+?)\s+\()?(.+?):(\d+):(\d+)\)?$/);if(!n)return e;let[,i,a,o,s]=n;if(!a.includes(t))return e;let c=parseInt(o,10),l=parseInt(s,10),u=Ka(r,{li...
Medium Unsafe Vm Context
Package source executes code through a VM context API.
dist/src/compiled/@workflow/core/runtime.js View on unpkg · L1 dist/src/internal/authored-module-loader.js View file 3 `).filter(e=>!e.startsWith(`//#region `)&&e!==`//#endregion`).join(`
L4: `)}async function loadBundledAuthoredModule(t,n){let i=await bundleAuthoredModuleCode(t,n),s=normalizeExternalDependencies(n.externalDependencies),c=createHash(`sha1`).update(t).up...
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/src/internal/authored-module-loader.js View on unpkg · L3 dist/src/internal/nitro/host/start-production-server.js View file 1 import{EVE_HEALTH_ROUTE_PATH}from"#protocol/routes.js";import{loadDevelopmentEnvironmentFiles}from"#cli/dev/environment.js";import{join,resolve}from"node:path";import{existsSync}fr...
L2: `))}async function terminate(e){e.exitCode!==null||e.killed||(e.kill(`SIGTERM`),await Promise.race([once(e,`exit`),setTimeout(2e4).then(()=>`timeout`)])===`timeout`&&e.exitCode===n...
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src/internal/nitro/host/start-production-server.js View on unpkg · L1 dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js View file 1 import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=...
L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),b=t(((t,n)=>{let r=e(`path`),i=u(),a=e=>{e=...
L4: `);return _?(a.originalMessage=a.message,a.message=y):a=Error(y),a.shortMessage=v,a.command=c,a.escapedCommand=l,a.exitCode=s,a.signal=o,a.signalDescription=m,a.stdout=e,a.stderr=t...
L5: `)}})),q=t((e=>{var t=e&&e.__createBinding||
High Host Fingerprint Exfiltration
Source collects local host identity data and sends it to an external endpoint.
dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js View on unpkg · L1 1 import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=...
L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),b=t(((t,n)=>{let r=e(`path`),i=u(),a=e=>{e=...
L4: `);return _?(a.originalMessage=a.message,a.message=y):a=Error(y),a.shortMessage=v,a.command=c,a.escapedCommand=l,a.exitCode=s,a.signal=o,a.signalDescription=m,a.stdout=e,a.stderr=t...
L5: `)}})),q=t((e=>{var t=e&&e.__createBinding||
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js View on unpkg · L1 dist/src/compiled/@vercel/sandbox/index.js View file 1 import{i as e,o as t,t as n}from"../../_chunks/node/rolldown-runtime-DaDcL9Zw.js";import{n as r,t as i}from"../../_chunks/node/dist-DsNhwdzf.js";import{n as a,t as o}from"../../_ch...
L2: `)),e.linkname&&(n+=y(` linkpath=`+e.linkname+`
...
L6: `)},n.exports=i})),xt=n((e=>{var t=yt();bt(),e.parse=function(e){return new t(e)}})),St=n(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnProp...
L7: ${e.message}`),t?new f.VercelOidcTokenError(t):e}return n}function m(){let e=(0,d.getContext)().headers?.[`x-vercel-oidc-token`]??process.env.VERCEL_OIDC_TOKEN;if(!e)throw Error(`T...
L8: `):t;let n=t.replace(/^/gm,`${Nt} `);console.error(Mt[e](n))}function Pt(e){return F.default.italic(F.default.dim("`")+e+F.default.dim("`"))}var Ft=t(a(),1);async function It()
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/src/compiled/@vercel/sandbox/index.js View on unpkg · L1 dist/src/compiled/_chunks/workflow/dist-eUxFublw.js View file 1 import{AISDKError as e,APICallError as t,EmptyResponseBodyError as n,InvalidArgumentError as r,InvalidResponseDataError as i,JSONParseError as a,LoadAPIKeyError as o,NoSuchProvider...
L2: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ...
L3: `))}};const It={major:4,minor:4,patch:3},N=p(`$ZodType`,(e,t)=>{var n;e??={},e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=It;let r=[...e._zod.def.checks??[]];e._zod.traits...
L4: if (${n}.issues.length) {
...
L72: ${i}`,d++;return}if(es(e,t,r)){f=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+...
L73: ${t}`,d+
High Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/src/compiled/_chunks/workflow/dist-eUxFublw.js View on unpkg · L1 dist/src/compiled/@vercel/oidc/index.js View file 1 Trigger-reachable command-output exfiltration chain: manifest.exports -> dist/src/public/agents/auth.js -> dist/src/compiled/@vercel/oidc/index.js
L1: import{createRequire as e}from"node:module";var t=Object.create,n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.getPrototypeOf,o=Obj...
L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),j=s(((e,t)=>{let n=u(`path`),r=x(),i=e=>{e=...
High Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/src/compiled/@vercel/oidc/index.js View on unpkg · L1 dist/src/compiled/shadcn-registry/index.js View file • path = dist/src/compiled/shadcn-registry/index.js
kind = oversized_source_file
sizeBytes = 9760341
magicHex = [redacted]
Medium Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/src/compiled/shadcn-registry/index.js View on unpkg dist/src/compiled/@linqapp/chat-sdk-adapter/index.js#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/src/compiled/@linqapp/chat-sdk-adapter/index.js#virtual:normalized:round1 View on unpkg dist/src/compiled/@vercel/otel/index.js View file • matchType = normalized_sha256
matchedPackage = eve@0.51.0
matchedPath = dist/src/compiled/@vercel/otel/index.js
matchedIdentity = npm:ZXZl:0.51.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/src/compiled/@vercel/otel/index.js View on unpkg dist/src/setup/primitives/run-vercel.js View file • matchType = normalized_sha256
matchedPackage = eve@0.51.0
matchedPath = dist/src/setup/primitives/run-vercel.js
matchedIdentity = npm:ZXZl:0.51.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/src/setup/primitives/run-vercel.js View on unpkg dist/src/runtime/governance/auth/http-basic.js View file • matchType = normalized_sha256
matchedPackage = eve@0.51.0
matchedPath = dist/src/channel/auth/http-basic.js
matchedIdentity = npm:ZXZl:0.51.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/src/runtime/governance/auth/http-basic.js View on unpkg High Known Malware Source Similarity dist/src/compiled/@vercel/otel/index.js
High Known Malware Source Similarity dist/src/setup/primitives/run-vercel.js
High Known Malware Source Similarity dist/src/runtime/governance/auth/http-basic.js
Medium Dynamic Require bin/eve.js
Medium Unsafe Vm Context dist/src/compiled/@workflow/core/runtime.js
Medium Oversized Source File dist/src/compiled/shadcn-registry/index.js
Medium Structural Risk Force Deep Review
Low Eval dist/src/compiled/gray-matter/index.js
Low Weak Crypto dist/src/internal/authored-module-loader.js
Runtime surface package.json
Entrypoints main → ./dist/src/index.js types → ./dist/src/index.d.ts exports map bin → eve
Runtime node >=24
Artifact 29.4 MB · 3,402 files 1 signature(s) · provenance
Install lifecycle No install hooks · other: build, build:compiled, build:js, build:types +8
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem NativeBindings Network Shell HighEntropyStrings Minified PossibleObfuscation UrlStrings Manifest: clean
17 flagged Lines 1-28 javascript
3 import { spawn } from "node:child_process" ;
4 import { access, readdir, realpath, stat } from "node:fs/promises" ;
High Child Process
Package source references child process execution.
bin/eve.js View on unpkg · L2 5 import { createRequire } from "node:module" ;
6 import { dirname, resolve } from "node:path" ;
7 import { fileURLToPath, pathToFileURL } from "node:url" ;
9 const require = createRequire ( import . meta .url);
10 const packageJson = require ( "../package.json" );
Medium Dynamic Require
Package source references dynamic require/import behavior.
bin/eve.js View on unpkg · L8 11 const packageNodeEngine = packageJson.engines?.node;
12 const bootstrapPackageRoot = resolve ( dirname ( fileURLToPath ( import . meta .url)), ".." );
15 if ( typeof packageNodeEngine !== "string" ) {
16 throw new Error ( "eve package.json must declare a valid engines.node range." );
19 function createBootstrapOptions ( overrides = {}) {
20 const packageRoot = overrides.packageRoot ?? bootstrapPackageRoot;
24 overrides.cliEntrypointPath ?? resolve (packageRoot, "dist" , "src" , "cli" , "run.js" ),
26 postBuildScriptPaths: overrides.postBuildScriptPaths ?? [
27 resolve (packageRoot, "scripts" , "copy-compiled-assets.mjs" ),
28 resolve (packageRoot, "scripts" , "copy-runtime-assets.mjs" ),
2 Cross-file remote execution chain: bin/eve.js spawns dist/src/compiled/@agentclientprotocol/sdk/index.js; helper contains network access plus dynamic code execution.
L2:
L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
...
L9: const require = createRequire(import.meta.url);
L10: const packageJson = require("../package.json");
L11: const packageNodeEngine = packageJson.engines?.node;
...
L350: }
L351: process.exitCode = 1;
L352: } finally {
High Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
bin/eve.js View on unpkg · L2 dist/src/compiled/gray-matter/index.js View file Lines 23-48 javascript
23 `,o?1+l:l)):u?(u=!1,e.result+=n.repeat(`
24 `,l+1)):l===0?o&&(e.result+=` `):e.result+=n.repeat(`
25 `,l):e.result+=n.repeat(`
26 `,o?1+l:l),o=!0,s=!0,l=0,r=e.position;!x(h)&&h!==0;)h=e.input.charCodeAt(++e.position);I(e,r,e.position,!1)}return!0}function J(e,t){var n,r=e.tag,i=e.anchor,a=[],o,s=!1,c;for(e.anchor!==null&&(e.anchorMap[e.anchor]=a),c=e.input.charCodeAt(e.position);c!==0&&!(c!==45||(o=e.input.charCodeAt(e.position+1),!C(o)));){if(s=!0,e.position++,B(e,!0,-1)&&e.lineIndent<=t){a.push(null),c=e.input.charCodeAt(e.position);continue}if(n=e.line,Z(e,t,u,!1,!0),a.push(e.result),B(e,!0,-1),c=e.input.charCodeAt(e.position),(e.line===n||e.lineIndent>t)&&c!==0)N(e,` bad indentation of a sequence entry `);else if(e.lin ...
dist/src/compiled/@workflow/core/runtime.js View file 1 import{a as e,i as t,t as n}from"../../_chunks/workflow/rolldown-runtime-8V8biNmG.js";import{$ as r,$n as i,$t as a,A as o,An as s,Ar as c,At as l,B as u,Bn as d,Bt as f,C as p,Cn ...
L2: `).map(e=>{let n=e.match(/^\s*at\s+(?:(.+?)\s+\()?(.+?):(\d+):(\d+)\)?$/);if(!n)return e;let[,i,a,o,s]=n;if(!a.includes(t))return e;let c=parseInt(o,10),l=parseInt(s,10),u=Ka(r,{li...
Medium Unsafe Vm Context
Package source executes code through a VM context API.
dist/src/compiled/@workflow/core/runtime.js View on unpkg · L1 dist/src/internal/authored-module-loader.js View file Lines 1-4 javascript
1 import {createHash} from "node:crypto" ; import {expectObjectRecord} from "#internal/authored-module.js" ; import {dirname,join,resolve} from "node:path" ; import {existsSync,mkdirSync,realpathSync,writeFileSync} from "node:fs" ; import {createCompiledModuleMapSource} from "#compiler/module-map.js" ; import
dist/src/internal/nitro/host/start-production-server.js View file 1 import{EVE_HEALTH_ROUTE_PATH}from"#protocol/routes.js";import{loadDevelopmentEnvironmentFiles}from"#cli/dev/environment.js";import{join,resolve}from"node:path";import{existsSync}fr...
L2: `))}async function terminate(e){e.exitCode!==null||e.killed||(e.kill(`SIGTERM`),await Promise.race([once(e,`exit`),setTimeout(2e4).then(()=>`timeout`)])===`timeout`&&e.exitCode===n...
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src/internal/nitro/host/start-production-server.js View on unpkg · L1 dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js View file 1 import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=...
L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),b=t(((t,n)=>{let r=e(`path`),i=u(),a=e=>{e=...
L4: `);return _?(a.originalMessage=a.message,a.message=y):a=Error(y),a.shortMessage=v,a.command=c,a.escapedCommand=l,a.exitCode=s,a.signal=o,a.signalDescription=m,a.stdout=e,a.stderr=t...
L5: `)}})),q=t((e=>{var t=e&&e.__createBinding||
High Host Fingerprint Exfiltration
Source collects local host identity data and sends it to an external endpoint.
dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js View on unpkg · L1 1 import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=...
L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),b=t(((t,n)=>{let r=e(`path`),i=u(),a=e=>{e=...
L4: `);return _?(a.originalMessage=a.message,a.message=y):a=Error(y),a.shortMessage=v,a.command=c,a.escapedCommand=l,a.exitCode=s,a.signal=o,a.signalDescription=m,a.stdout=e,a.stderr=t...
L5: `)}})),q=t((e=>{var t=e&&e.__createBinding||
High Command Output Exfiltration
dist/src/compiled/@vercel/sandbox/index.js View file 1 import{i as e,o as t,t as n}from"../../_chunks/node/rolldown-runtime-DaDcL9Zw.js";import{n as r,t as i}from"../../_chunks/node/dist-DsNhwdzf.js";import{n as a,t as o}from"../../_ch...
L2: `)),e.linkname&&(n+=y(` linkpath=`+e.linkname+`
...
L6: `)},n.exports=i})),xt=n((e=>{var t=yt();bt(),e.parse=function(e){return new t(e)}})),St=n(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnProp...
L7: ${e.message}`),t?new f.VercelOidcTokenError(t):e}return n}function m(){let e=(0,d.getContext)().headers?.[`x-vercel-oidc-token`]??process.env.VERCEL_OIDC_TOKEN;if(!e)throw Error(`T...
L8: `):t;let n=t.replace(/^/gm,`${Nt} `);console.error(Mt[e](n))}function Pt(e){return F.default.italic(F.default.dim("`")+e+F.default.dim("`"))}var Ft=t(a(),1);async function It()
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/src/compiled/@vercel/sandbox/index.js View on unpkg · L1 dist/src/compiled/_chunks/workflow/dist-eUxFublw.js View file 1 import{AISDKError as e,APICallError as t,EmptyResponseBodyError as n,InvalidArgumentError as r,InvalidResponseDataError as i,JSONParseError as a,LoadAPIKeyError as o,NoSuchProvider...
L2: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ...
L3: `))}};const It={major:4,minor:4,patch:3},N=p(`$ZodType`,(e,t)=>{var n;e??={},e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=It;let r=[...e._zod.def.checks??[]];e._zod.traits...
L4: if (${n}.issues.length) {
...
L72: ${i}`,d++;return}if(es(e,t,r)){f=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+...
L73: ${t}`,d+
High Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/src/compiled/_chunks/workflow/dist-eUxFublw.js View on unpkg · L1 dist/src/compiled/@vercel/oidc/index.js View file 1 Trigger-reachable command-output exfiltration chain: manifest.exports -> dist/src/public/agents/auth.js -> dist/src/compiled/@vercel/oidc/index.js
L1: import{createRequire as e}from"node:module";var t=Object.create,n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.getPrototypeOf,o=Obj...
L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),j=s(((e,t)=>{let n=u(`path`),r=x(),i=e=>{e=...
High Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/src/compiled/@vercel/oidc/index.js View on unpkg · L1 dist/src/compiled/shadcn-registry/index.js View file • path = dist/src/compiled/shadcn-registry/index.js
kind = oversized_source_file
sizeBytes = 9760341
magicHex = [redacted]
Medium Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/src/compiled/shadcn-registry/index.js View on unpkg dist/src/compiled/@linqapp/chat-sdk-adapter/index.js#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/src/compiled/@linqapp/chat-sdk-adapter/index.js#virtual:normalized:round1 View on unpkg dist/src/compiled/@vercel/otel/index.js View file • matchType = normalized_sha256
matchedPackage = eve@0.51.0
matchedPath = dist/src/compiled/@vercel/otel/index.js
matchedIdentity = npm:ZXZl:0.51.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/src/compiled/@vercel/otel/index.js View on unpkg dist/src/setup/primitives/run-vercel.js View file • matchType = normalized_sha256
matchedPackage = eve@0.51.0
matchedPath = dist/src/setup/primitives/run-vercel.js
matchedIdentity = npm:ZXZl:0.51.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/src/setup/primitives/run-vercel.js View on unpkg dist/src/runtime/governance/auth/http-basic.js View file • matchType = normalized_sha256
matchedPackage = eve@0.51.0
matchedPath = dist/src/channel/auth/http-basic.js
matchedIdentity = npm:ZXZl:0.51.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/src/runtime/governance/auth/http-basic.js View on unpkg 0
)
===
65279
&&
(e
=
e.
slice
(
1
)));
var
n
=new
ne
(e,t),r
=
e.
indexOf
(
`
\0
`
);
for
(r
!==-
1
&&
(n.position
=
r,
N
(n,
`null byte is not allowed in input`
)),n.input
+=
`
\0
`
;n.input.
charCodeAt
(n.position)
===
32
;)n.lineIndent
+=
1
,n.position
+=
1
;
for
(;n.position
<
n.
length
-
1
;)
ae
(n);
return
n.documents}
function
oe
(
e
,
t
,
n
){
typeof
t
==
`object`
&&
t
&&
n
===void
0
&&
(n
=
t,t
=
null
);
var
r
=
Q
(e,n);
if
(
typeof
t
!=
`function`
)
return
r;
for
(
var
i
=
0
,a
=
r.
length
;i
<
a;i
+=
1
)
t
(r[i])}
function
se
(
e
,
t
){
var
n
=
Q
(e,t);
if
(n.
length
!==
0
){
if
(n.
length
===
1
)
return
n[
0
];
throw
new
r
(
`expected a single document in the stream, but found more`
)}}
function
ce
(
e
,
t
,
r
...
28 `,i),a===-1?(s=e.slice(i),i=c):(s=e.slice(i,a+1),i=a+1),s.length&&s!==`
29 `&&(o+=r),o+=s;return o}function F(e,t){return`
30 `+n.repeat(` `,e.indent*t)}function I(e,t){var n,r,i;for(n=0,r=e.implicitTypes.length;n<r;n+=1)if(i=e.implicitTypes[n],i.resolve(t))return!0;return!1}function L(e){return e===d||e===c}function R(e){return 32<=e&&e<=126||161<=e&&e<=55295&&e!==8232&&e!==8233||57344<=e&&e<=65533&&e!==65279||65536<=e&&e<=1114111}function z(e){return R(e)&&!L(e)&&e!==65279&&e!==u&&e!==l}function B(e,t){return R(e)&&e!==65279&&e!==y&&e!==T&&e!==E&&e!==O&&e!==k&&e!==x&&(e!==m||t&&z(t))}function V(e){return R(e)&&e!==65279&&!L(e)&&e!==b&&e!==w&&e!==x&&e!==y&&e!==T&&e!==E&&e!==O&&e!==k&&e!==m&&e!==g&&e!==v&&e!==f&&e!== ...
31 ` ; return n +( r &&( e [ e . length - 2 ]=== `
34 `} function X ( e ){ return e[e. length - 1 ] === `
35 ` ? e. slice ( 0 , - 1 ) : e} function ie ( e , t ){ for ( var n = /( \n + )( [ ^ \n] * )/ g , r =function (){ var r = e. indexOf ( `
36 ` ); return r = r ===- 1 ? e. length : r,n.lastIndex = r, Z (e. slice ( 0 ,r),t)}(),i = e[ 0 ] === `
37 ` || e[ 0 ] === ` ` ,a,o;o = n. exec (e);){ var s = o[ 1 ],c = o[ 2 ];a = c[ 0 ] === ` ` ,r += s + ( ! i &&! a && c !== `` ? `
38 ` : `` ) + Z (c,t),i = a} return r} function Z ( e , t ){ if (e === `` || e[ 0 ] === ` ` ) return e; for ( var n = / [ ^ ] / g ,r,i = 0 ,a,o = 0 ,s = 0 ,c = `` ;r = n. exec (e);)s = r.index,s - i > t && (a = o > i ? o : s,c += `
39 ` + e. slice (i,a),i = a + 1 ),o = s; return c += `
40 ` ,e. length - i > t && o > i ? c += e. slice (i,o) + `
41 ` + e. slice (o + 1 ) : c += e. slice (i),c. slice ( 1 )} function ae ( e ){ for ( var t = `` ,n,r,i,a = 0 ;a < e. length ;a ++ ){ if (n = e. charCodeAt (a),n >= 55296 && n <= 56319 && (r = e. charCodeAt (a + 1 ),r >= 56320 && r <= 57343 )){t += M ((n - 55296 ) * 1024 + r - 56320 + 65536 ),a ++ ; continue }i = A [n],t +=! i && R (n) ? e[a] : i || M (n)} return t} function Q ( e , t , n ){ var r = `` ,i = e.tag,a,o; for (a = 0 ,o = n. length ;a < o;a += 1 ) $ (e,t,n[a], ! 1 , ! 1 ) && (a !== 0 && (r += `,` + (e.condenseFlow ? `` : ` ` )),r += e.dump);e.tag = i,e.dump = `[` + r + `]` } function oe ( e , t , n , r ){ var i = `` ,a = e.tag,o,s; for (o = 0 ,s = n. length ;o < s;o += 1 ) $ (e,t + 1 ,n[o], ! 0 , ! 0 ) && (( ! r || o !== 0 ) && (i += F (e,t)),e.dump && l === e.dump. charCodeAt ( 0 ) ? i += `-` : i += `- ` ,i += e.d ...
42 `:``}function pe(e,t){return fe(e,n.extend({schema:a},t))}t.exports.dump=fe,t.exports.safeDump=pe})),require_js_yaml$1=__commonJSMin(((e,t)=>{var n=require_loader(),r=require_dumper();function i(e){return function(){throw Error(` Function `+e+` is deprecated and cannot be used. `)}}t.exports.Type=require_type(),t.exports.Schema=require_schema(),t.exports.FAILSAFE_SCHEMA=require_failsafe(),t.exports.JSON_SCHEMA=require_json(),t.exports.CORE_SCHEMA=require_core(),t.exports.DEFAULT_SAFE_SCHEMA=require_default_safe(),t.exports.DEFAULT_FULL_SCHEMA=require_default_full(),t.exports.load=n.load,t.export ...
44 }());` ), eval (str) || {}} catch (e){ if (wrap !==! 1 && /(unexpected | identifier)/ i . test (e.message)) return parse (str,options, ! 1 ); throw SyntaxError (e)}}, stringify : function (){ throw Error ( `stringifying JavaScript is not supported` )}}})),require_strip_bom_string = __commonJSMin ((( e , t ) => {t. exports =function ( e ){ return typeof e == `string` && e. charAt ( 0 ) === `` ? e. slice ( 1 ) : e}})),require_utils = __commonJSMin (( e => { let t = require_strip_bom_string (),n = require_kind_of ();e. define =function ( e , t , n ){Reflect. defineProperty (e,t,{enumerable: ! 1 ,configurable: ! 0 ,writable: ! 0 ,value:n})},e. isBuffer =function ( e ){ return n (e) === `buffer` },e.isObj ...
45 `?e:e+`
Low Eval
Package source references a known benign dynamic code generation pattern.
dist/src/compiled/gray-matter/index.js View on unpkg · L43 46 `}})),require_excerpt=__commonJSMin(((e,t)=>{let n=require_defaults();t.exports=function(e,t){let r=n(t);if(e.data??={},typeof r.excerpt==` function `) return r . excerpt ( e , r ); let i = e.data.excerpt_separator || r.excerpt_separator; if (i == null && (r.excerpt ===! 1 || r.excerpt == null )) return e; let a =typeof r.excerpt == `string` ? r.excerpt : i || r.delimiters[ 0 ],o = e.content. indexOf (a); return o !==- 1 && (e.excerpt = e.content. slice ( 0 ,o)),e}})),require_to_file = __commonJSMin ((( e , t ) => { let n = require_kind_of (),r = require_stringify (),i = require_utils ();t. exports =function ( e ){ return n (e) !== `object` && (e = {content:e}), n (e.data) !== `objec ...
47 ` + n.delimiters[ 1 ],c = e.content;n.language && (e.language = n.language); let f = a. length ; if ( ! u. startsWith (c,a,f)) return o (e,n),e; if (c. charAt (f) === a. slice ( - 1 )) return e;c = c. slice (f); let p = c. length ,m = d. language (c,n);m.name && (e.language = m.name,c = c. slice (m.raw. length )); let h = c. indexOf (s); return h ===- 1 && (h = p),e.matter = c. slice ( 0 ,h),e.matter. replace ( / ^ \s * # [ ^ \n] + / gm , `` ). trim () === `` ? (e.isEmpty =! 0 ,e.empty = e.content,e.data = {}) : e.data = l (e.language,e.matter,n),h === p ? e.content = `` : (e.content = c. slice (h + s. length ),e.content[ 0 ] === ` \r ` && (e.content = e.content. slice ( 1 )),e.content[ 0 ] === `
48 ` && (e.content = e.content. slice ( 1 ))), o (e,n),(n.sections ===! 0 ||typeof n.section == `function` ) && r (e,n.section),e}d.engines = s,d. stringify =function ( e , t , n ){ return typeof e == `string` && (e = d (e,n)), a (e,t,n)},d. read =function ( e , t ){ let r = d (n. readFileSync (e, `utf8` ),t); return r.path = e,r},d. test =function ( e , t ){ return u. startsWith (e, i (t).delimiters[ 0 ])},d. language =function ( e , t ){ let n = i (t).delimiters[ 0 ];d. test (e) && (e = e. slice (n. length )); let r = e. slice ( 0 ,e. search ( / \r ? \n / )); return {raw:r,name:r ? r. trim () : `` }},d.cache = {},d. clearCache =function (){d.cache = {}},t.exports = d})); export default require_gray_matter (); export {};
Long lines were clipped for display.
{buildSingleRolldownChunk,buildWithNitroRolldown}
from
"#internal/bundler/nitro-rolldown.js"
;
import
{createAuthoredAssetImportPlugin}
from
"#internal/authored-asset-import-plugin.js"
;
import
{assertNoWorkflowDirectivePrologue}
from
"#internal/authored-directive-prologue.js"
;
import
{createAuthoredModuleBundleError}
from
"#intern ..
.
2 `),moduleType:` js `}}}:null,...n.plugins,t.extensionScopeNamespace===void 0?null:createFixedNamespaceScopePlugin(t.extensionScopeNamespace),createAuthoredRelativeExtensionResolverPlugin({extensions:RESOLVE_EXTENSIONS}),createAuthoredAssetImportPlugin(),createAuthoredPackageTsConfigPathsPlugin({appPackageRoot:a,extensions:RESOLVE_EXTENSIONS}),createNodeEsmCompatBannerPlugin({includeRequire:!0}),n.packageBoundaryPlugin].filter(e=>e!==null);try{return(await buildSingleRolldownChunk(` authored module for "${e}"`,{cwd:a,input:e,platform:` node `,plugins:s,resolve:{conditionNames:[` eve - source `],extensio ...
3 ` ). filter ( e =>! e . startsWith ( `//#region ` )&& e !== `//#endregion` ). join ( `
4 ` )} async function loadBundledAuthoredModule ( t , n ){ let i =await bundleAuthoredModuleCode (t,n),s = normalizeExternalDependencies (n.externalDependencies),c = createHash ( `sha1` ). update (t). update ( ` \0 ` ). update (s. join ( ` \0 ` )). update ( ` \0 ` ). update (n.extensionScopeNamespace ?? `` ). update ( ` \0 ` ). update (i). digest ( `hex` ),l = join ( resolveAuthoredPackageRoot (t), AUTHORED_MODULE_BUNDLE_DIRECTORY_PATH ),u = join (l, `${ c }.mjs` ); existsSync (u) || ( mkdirSync (l,{recursive: ! 0 }), writeFileSync (u,i)); try { return await import ( `${ createFileImportSpecifier ( u ) }?v=${ c }` )} catch (e){ throw createAuthoredModuleEvaluationError (t,e)}} function createI ...
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/src/internal/authored-module-loader.js View on unpkg · L3 Long lines were clipped for display.
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js