github.com/jaredwray/keyv · 825b944
90/ 100
No threats observedNo threats observed: The sandbox run completed without recorded malicious behaviour. Scanned 29 Oct 2026.
NetworkRegistry only
Registry traffic only
Files46 changes
/home/cr/.local/share/…13e3b7/_tmp_2487_0c38afd5
CodeNothing taken off
no code deduction
Score
90 / 1001000
Nothing was taken off for what the code did or what running it showed.
What it did
285 events in 31.9sFetched6.5s
3524457 bytes fetched inside the VM from codeload.github.com in 3669 ms; commit id verified; egress restored
Read14.2s
9 scanner finding(s)
Checked14.2s
0 locked dependencies, 0 malicious
Jev27.5s
Answered questions from the evidence
Sandbox27.6s
install completed, entry completed, 200 forged call(s)
Score27.6s
90 No threats observed
Network
nothing real left the machineAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
Show all 200 calls
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@ai-sdk%2Fanthropic
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-darwin-arm64
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz…napi-android-arm-eabi
0 B sent in install
GETForged registry
registry.npmjs.org/@ai-sdk%2Fopenai
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-android-arm64
0 B sent in install
GETForged registry
registry.npmjs.org/@ai-sdk%2Fprovider
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-darwin-x64
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz…i-linux-arm-gnueabihf
0 B sent in install
GETForged registry
registry.npmjs.org/@ai-sdk%2Fprovider-utils
0 B sent in install
GETForged registry
registry.npmjs.org/@ai-sdk%2Fgoogle
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-freebsd-x64
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-linux-arm64-gnu
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@ai-sdk%2Fgateway
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz…api-linux-riscv64-gnu
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz…napi-linux-arm64-musl
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-linux-ppc64-gnu
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcredential-provider-http
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-linux-s390x-gnu
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcredential-provider-login
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-linux-x64-gnu
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-linux-x64-musl
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz…api-openharmony-arm64
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcreden…provider-web-identity
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcredential-provider-node
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fdynamodb-codec
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fendpoint-cache
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcredential-provider-sso
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Flib-dynamodb
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-win32-ia32-msvc
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fmiddle…re-endpoint-discovery
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz4-napi-win32-x64-msvc
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antoniomuso%2Flz…napi-win32-arm64-msvc
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Ftoken-providers
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Futil-dynamodb
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-validator-identifier
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Ftypes
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcore
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fparser
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Ftypes
0 B sent in install
GETForged registry
registry.npmjs.org/@bcoe%2Fv8-coverage
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fcli-darwin-x64
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fbiome
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fclient-dynamodb
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcredential-provider-ini
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcredential-provider-env
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fcli-linux-arm64
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fcli-linux-x64-musl
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fcli-linux-arm64-musl
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fcli-linux-x64
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fcredential-provider-process
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@cacheable%2Futils
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@cloudflare%2Fworkerd-darwin-arm64
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fcode-frame
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fnested-clients
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fsignature-v4-multi-region
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-string-parser
0 B sent in install
GETForged registry
registry.npmjs.org/@cloudflare%2Fworkerd-linux-64
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@cloudflare%2Fworkerd-linux-arm64
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fcli-darwin-arm64
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@emnapi%2Fwasi-threads
0 B sent in install
GETForged registry
registry.npmjs.org/@emnapi%2Fruntime
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fcli-win32-x64
0 B sent in install
GETForged registry
registry.npmjs.org/@cacheable%2Fmemory
0 B sent in install
GETForged registry
registry.npmjs.org/@esbuild%2Fandroid-arm64
0 B sent in install
GETForged registry
registry.npmjs.org/@cacheable%2Fnet
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@esbuild%2Faix-ppc64
0 B sent in install
GETForged registry
registry.npmjs.org/@biomejs%2Fcli-win32-arm64
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@aws-sdk%2Fxml-builder
0 B sent in install
GETForged registry
registry.npmjs.org/@esbuild%2Fandroid-arm
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@cspotcode%2Fsource-map-support
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@cloudflare%2Fworkerd-windows-64
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@cloudflare%2Fworkerd-darwin-64
0 B sent in install
GETForged registry
registry.npmjs.org/@esbuild%2Fnetbsd-arm64
0 B sent in install
GETForged registry
registry.npmjs.org/@emnapi%2Fcore
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@esbuild%2Flinux-arm64
0 B sent in install
GETForged registry
registry.npmjs.org/@esbuild%2Flinux-mips64el
0 B sent in install
Luna's report
This result was No threats observed. Pin the scanned version. The run did not verify behaviour outside the observed install and entry windows.
We installed the package and ran its entry point in a throwaway sandbox, then scanned the reachable code. The entry point completed, and the run recorded no reportable behaviour.
What it ran
Installedpnpm · 0 packages · 8.6s
Entry pointenv -i HOME=/hom…T=1 FAKETIME_NO_CAC
NetworkRegistry only
MachineDestroyed after the scan
Jev's answers
answered from the evidenceDocs check
The docs do not say it makes no network calls
The docs do not say it has no side effects
Show all 3 answers
What it did fits what its docs say it is for
Install check
Install-time code uses the network
Install-time code does not read credentials
Show all 5 answers
Install-time code does not run other programs or payloads
Install-time code is not obfuscated
Jev judged this code harmless
package.jsonNot verified
Behaviour outside the observed install and entry windows
Code paths not triggered by install or the entry point
Show all 4 items
Payloads gated on calendar dates past the accelerated clock window, or on hosts that need real responses
Key-shaped strings in 7 files, never seen leaving the machine
Reputation
GitHubOwner 14 years old
GitHubOwner established (over a year, 3+ public repositories)
GitHub3.2K stars
GitHub25 public repos
Shown apart from the code and behaviour findings.