eve@0.64.0
Filesystem-first framework for durable backend AI agents that run anywhere.
AI Security Review
scanned 1mo ago · by lpm-firewall-aieve 0.64.0 is a Vercel agent framework whose install metadata has no lifecycle hook and whose inspected auth, CLI, and provider code stays on the product endpoints or local comparison. Risky primitives are user-invoked agent tools rather than a hidden install chain.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
No install-time or import-time attack trigger is present.
Impact
No unconsented credential theft, remote payload execution, persistence, or agent control-surface mutation was established.
Mechanism
The package is an agent framework and CLI. Shell, file, and network behavior runs when the user invokes those tools.
AI rationale
eve 0.64.0 is a Vercel agent framework whose install metadata has no lifecycle hook and whose inspected auth, CLI, and provider code stays on the product endpoints or local comparison. Risky primitives are user-invoked agent tools rather than a hidden install chain.
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json scripts are build and test commands only, and the manifest has no preinstall, install, or postinstall hook.
- bin/eve.js is the user-launched eve CLI and resolves dist/src/cli/run.js after the user runs it.
- Vercel model auth accepts OAuth endpoints only when the origin is https://vercel.com or https://api.vercel.com.
- Mock model fixtures export local prompt and tool-input helpers and do not send data.
- HTTP basic channel auth compares caller-supplied credentials locally with a timing-safe hash.
- The bundled OpenAI client defaults its base URL to https://api.openai.com/v1 and uses the caller OPENAI_API_KEY.
Evidence against
- historical-eve-0-30-8 aliases eve@0.30.8 only as a devDependency and is not a published runtime dependency.
- Shell, file, and network helpers are agent tools and CLI commands, not install-time execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem
Source & flagged code
11 flagged · loading sourcebin/eve.jsView file
2L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
High
2Cross-file remote execution chain: bin/eve.js spawns dist/src/compiled/@agentclientprotocol/sdk/index.js; helper contains network access plus dynamic code execution.
L2:
L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
...
L9: const require = createRequire(import.meta.url);
L10: const packageJson = require("../package.json");
L11: const packageNodeEngine = packageJson.engines?.node;
...
L354: }
L355: process.exitCode = 1;
L356: } finally {
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
bin/eve.jsView on unpkg · L2•matchType = normalized_sha256
matchedPackage = eve@0.51.0
matchedPath = bin/eve.js
matchedIdentity = npm:ZXZl:0.51.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
Findings
2 Critical6 High6 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/src/internal/model-auth/vercel.js
CriticalPrevious Version Dangerous Deltadist/src/compiled/@ai-sdk/openai/index.js
HighChild Processbin/eve.js
HighShell
HighCross File Remote Execution Contextbin/eve.js
HighSemantic Analysis Limiteddist/src/runtime/agent/mock-model-fixtures.js#virtual:normalized:round1
HighKnown Malware Source Similaritybin/eve.js
HighKnown Malware Source Similaritydist/src/channel/auth/http-basic.js
MediumDynamic Requirebin/eve.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/src/compiled/just-secrets/windows.ps1
Affected versions and remediation
This report applies to eve@0.64.0.
See all versions of eve for other recorded verdicts.
- Review the evidence and your use of eve@0.64.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.