supply chain / google-generative-ai-js

Gemini JS SDK

registrynpm

package name@google/generative-ai

maintainerGoogle

The Gemini JavaScript SDK provides access to the Google Gemini model family from Node.js and browser environments. It supports multimodal inputs, function calling, and streaming. It is used in web applications and serverless functions that call Gemini for text generation, vision, and code tasks.

api usage

Checking Gemini JS SDK

@google/generative-ai 0.17.0 is a clean, monitored version with no known supply chain compromise. The example response returns supply_chain_monitored: true and compromised: false with an empty sources array.

bash

curl "https://api.attestd.io/v1/check?product=%40google%2Fgenerative-ai&version=0.17.0" \
  -H "Authorization: Bearer YOUR_API_KEY"

example response

json

{
  "product": "@google/generative-ai",
  "version": "0.17.0",
  "supported": true,
  "risk_state": "none",
  "risk_factors": [],
  "actively_exploited": false,
  "remote_exploitable": false,
  "authentication_required": false,
  "patch_available": false,
  "fixed_version": null,
  "confidence": 0.9,
  "cve_ids": [],
  "cves": null,
  "max_epss": null,
  "typosquat": null,
  "supply_chain_monitored": true,
  "supply_chain": {
    "compromised": false,
    "sources": [],
    "malware_type": null,
    "description": null,
    "advisory_url": null,
    "compromised_at": null,
    "removed_at": null
  },
  "last_updated": "2026-05-01T00:00:00Z"
}

attack surface

Why this package is monitored

The Gemini JS SDK often runs with keys in env vars or client bundles for multimodal and function-calling apps. A hostile build can harvest those keys and prompt payloads on the first generateContent call.

Attestd monitors @google/generative-ai using the following detection sources:

registry

Manually curated advisories in the Attestd registry, verified by a human analyst. Confidence 1.0.

osv

OSV.dev malicious-package advisories with IDs prefixed MAL-. Confidence 0.95.

npm_deprecation

npm package versions with deprecation messages containing targeted attack language such as malicious, backdoor, or compromised. Confidence 0.80.

Supply chain overview All npm packages OpenAI SDK (JS)Anthropic SDK (JS)Vercel AI SDK Response fields