eve@0.68.0
Filesystem-first framework for durable backend AI agents that run anywhere.
AI Security Review
scanned 24d ago · by lpm-firewall-aiNo lifecycle hook, self-dependency chain, credential exfiltration path, or unconsented control-surface mutation was found in the inspected source. The observed network authentication code validates Vercel OAuth origins.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Normal library import or explicit CLI invocation.
Impact
No confirmed malicious impact was established.
Mechanism
The inspected code provides CLI, authentication, and local fixture behavior; no install-time attack behavior was found.
AI rationale
No lifecycle hook, self-dependency chain, credential exfiltration path, or unconsented control-surface mutation was found in the inspected source. The observed network authentication code validates Vercel OAuth origins.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Package metadata exposes a CLI and library entrypoint.
- The CLI runs only when invoked directly.
- Vercel OAuth endpoints are restricted to approved Vercel origins.
- Mock-model code resolves local fixture replies from supplied messages.
- HTTP Basic authentication compares hashed credentials using a timing-safe comparison.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
10 flagged · loading sourcebin/eve.jsView file
2L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
High
2Cross-file remote execution chain: bin/eve.js spawns dist/src/compiled/@ai-sdk/anthropic/index.js; helper contains network access plus dynamic code execution.
L2:
L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
...
L9: const require = createRequire(import.meta.url);
L10: const packageJson = require("../package.json");
L11: const packageNodeEngine = packageJson.engines?.node;
...
L354: }
L355: process.exitCode = 1;
L356: } finally {
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
bin/eve.jsView on unpkg · L2•matchType = normalized_sha256
matchedPackage = eve@0.51.0
matchedPath = bin/eve.js
matchedIdentity = npm:ZXZl:0.51.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
Findings
1 Critical6 High6 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/src/internal/model-auth/vercel.js
HighChild Processbin/eve.js
HighShell
HighCross File Remote Execution Contextbin/eve.js
HighSemantic Analysis Limiteddist/src/runtime/agent/mock-model-fixtures.js#virtual:normalized:round1
HighKnown Malware Source Similaritybin/eve.js
HighKnown Malware Source Similaritydist/src/channel/auth/http-basic.js
MediumDynamic Requirebin/eve.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/src/compiled/just-secrets/windows.ps1
MediumOversized Source Filedist/src/compiled/shadcn-registry/index.js
Affected versions and remediation
This report applies to eve@0.68.0.
See all versions of eve for other recorded verdicts.
- Review the evidence and your use of eve@0.68.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.