supply chain / google-generative-ai-js

Gemini JS SDK

registrynpm

package name@google/generative-ai

maintainerGoogle

The Gemini JavaScript SDK provides access to the Google Gemini model family from Node.js and browser environments. It supports multimodal inputs, function calling, and streaming. It is used in web applications and serverless functions that call Gemini for text generation, vision, and code tasks.

api usage

Checking Gemini JS SDK

@google/generative-ai 0.17.0 is a clean version with no known supply chain compromise. The response returns compromised: false with an empty sources array.

bash

curl "https://api.attestd.io/v1/check?product=%40google%2Fgenerative-ai&version=0.17.0" \
  -H "Authorization: Bearer YOUR_API_KEY"

json

{
  "product": "@google/generative-ai",
  "version": "0.17.0",
  "supported": true,
  "risk_state": "none",
  "supply_chain": {
    "compromised": false,
    "sources": [],
    "malware_type": null,
    "description": null,
    "advisory_url": null,
    "compromised_at": null,
    "removed_at": null
  },
  "last_updated": "2026-05-01T00:00:00Z"
}

attack surface

Why this package is monitored

Browser-side AI SDK packages run in contexts where API keys may be embedded in bundled JavaScript. A compromised version can read keys from the runtime environment and exfiltrate them on the first API call.

Attestd monitors @google/generative-ai using the following detection sources:

registry

Manually curated advisories in the Attestd registry, verified by a human analyst. Confidence 1.0.

osv

OSV.dev malicious-package advisories with IDs prefixed MAL-. Confidence 0.95.

npm_deprecation

npm package versions with deprecation messages containing targeted attack language such as malicious, backdoor, or compromised. Confidence 0.80.

Supply chain overview All npm packages OpenAI SDK (JS)Anthropic SDK (JS)Vercel AI SDK Response fields