leviathan-of-hashem@3.20.10
Leviathan Shel HaShem — the 708-agent Kabbalistic swarm in your terminal. Self-contained binary, no Python/Node deps.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package contains a concrete user-invoked remote-code-execution path through an unverified HTTP binary download. It lacks an automatic install hook, so the source does not establish unconsented install-time malware.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
User runs an installed command such as lvtn or uses npx leviathan-of-hashem.
Impact
A network attacker or endpoint operator can cause arbitrary code execution as the invoking user.
Mechanism
Remote binary download, executable caching, and process execution.
AI rationale
The package contains a concrete user-invoked remote-code-execution path through an unverified HTTP binary download. It lacks an automatic install hook, so the source does not establish unconsented install-time malware.
Evidence
bin/run.js.lvtn/bin/lvtn.lvtn/bin/version.txt
Network endpoints1
5.78.43.130:3708/releases/cli
Decision evidence
public snapshotAI called this Suspicious at 98.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The CLI defaults to an HTTP endpoint controlled by a raw IP address.
- On every CLI invocation it can download a platform binary, cache it, mark it executable, and run it without integrity verification.
- If downloading fails, it invokes pip to install and run a separate lvtn package.
Evidence against
- package.json has no npm lifecycle scripts, so this does not execute during installation.
- The downloader runs only when a user invokes one of the declared CLI commands.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flagged · loading sourcebin/run.jsView file
11const path = require("path");
L12: const { spawn, execSync } = require("child_process");
L13:
High
124try {
L125: execSync(`powershell -Command "Unblock-File -Path '${BIN_PATH}'"`, { stdio: "ignore" });
L126: } catch (_) {}
High
7L8: const https = require("https");
L9: const http = require("http");
...
L11: const path = require("path");
L12: const { spawn, execSync } = require("child_process");
L13:
L14: const BASE = process.env.LVTN_BINARY_BASE || "http://5.78.43.130:3708/releases/cli";
L15: const CACHE_DIR = process.env.LVTN_CACHE_DIR ||
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/run.jsView on unpkg · L7Findings
6 High4 Medium5 Low
HighChild Processbin/run.js
HighShellbin/run.js
HighSame File Env Network Executionbin/run.js
HighSandbox Evasion Gated Capabilitybin/run.js
HighKnown Malware Source Similaritybin/run.js
HighKnown Malware Source Fingerprint Signaturebin/run.js
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobleviathan-of-hashem-3.14.3.tgz
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionleviathan-of-hashem-3.14.3.tgz
Affected versions and remediation
This report applies to leviathan-of-hashem@3.20.10.
See all versions of leviathan-of-hashem for other recorded verdicts.
- Review the evidence and your use of leviathan-of-hashem@3.20.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.