@0xmaxma/claude-gateway@1.8.11: Suspicious npm security report

Loading npm security reports…

@0xmaxma/claude-gateway@1.8.11: Suspicious npm security report | LPM Firewall

Source & flagged code

20 flagged

package.jsonView file

Lines 12-52json

12 },

13 "engines": {

14 "node": ">=22"

15 },

16 "files": [

17 "dist/",

18 "lib/",

19 "resource/",

20 "mcp/",

21 "!mcp/node_modules",

22 "!mcp/node_modules/**",

23 "README.md",

24 "config.template.json"

25 ],

26 "publishConfig": {

27 "access": "public"

28 },

29 "scripts": {

30 "build": "tsc",

31 "start": "node --no-warnings=ExperimentalWarning --env-file-if-exists=.env dist/entry.js gateway start",

32 "postinstall": "if command -v bun >/dev/null 2>&1; then bun install --cwd mcp; else echo 'Warning: bun not found. Run `cd mcp && bun install` manually to enable MCP tools.'; fi",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L32

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 "pretest": "npm run build",

34 "test": "NODE_OPTIONS=--max-old-space-size=2560 jest",

35 "pretest:unit": "npm run build",

36 "test:unit": "jest --testPathPattern=unit",

37 "test:e2e": "jest --testPathPattern=tests/e2e --forceExit",

38 "integration": "jest --testPathPattern=integration --testTimeout=15000",

39 "integration:ma": "jest --testPathPattern=multi-agent --testTimeout=15000",

40 "test:manual": "jest --testPathPattern=phase-manual --testTimeout=15000",

41 "integration:hb": "jest --testPathPattern=heartbeat-e2e --testTimeout=15000",

42 "integration:cs": "jest --testPathPattern=character-system --testTimeout=15000",

43 "typecheck": "tsc --noEmit",

44 "gen-cli": "ts-node scripts/gen-cli.ts",

45 "gen-cli:check": "ts-node scripts/gen-cli.ts --check"

46 },

47 "dependencies": {

48 "@line/bot-sdk": "^11.0.2",

49 "@whiskeysockets/baileys": "^6.7.24",

50 "@xterm/headless": "^6.0.0",

51 "chokidar": "^3.5.0",

52 "cron-parser": "^5.5.0",

dist/discord/receiver.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys

dist/webhook/manager.jsView file

Lines 28-68javascript

28var __importStar = (this && this.__importStar) || (function () {

29 var ownKeys = function(o) {

30 ownKeys

dist/api/router.jsView file

Lines 427-467javascript

427function detectMimeFromMagic(header) {

428 if (header[0] === 0xFF && header[1] === 0xD8 && header[2]

dist/connectors/mcp-oauth.js#virtual:normalized:round1View file

4* "custom" MCP connectors whose only auth option is a real OAuth sign-in (no L5: * static API key) — e.g. Firecrawl"s `https://mcp.firecrawl.dev/v2/mcp-oauth`.\n *\n * This module never touches Express or the pending-flow store — pure discovery\n * + token func... L6: * ... L36: * L37: * Node"s fetch defaults to `redirect: "follow"`, and a followed redirect goes\n * wherever the answering server names — without passing through\n * `assertFetchableUrl`, which only... L38: if (!location) ... L50: ? init L51: : { ...init, method: "GET", body: undefined }; L52: } ... L144: if (!resourceMetadataUrl) { L145: throw new Error(`${mcpUrl} returned 401 but no "resource_metadata" in its WWW-Authenticate header — can"t discover its OAuth server.`);\n }\n const prm = await fetchFollowing... L1

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/connectors/mcp-oauth.js#virtual:normalized:round1View on unpkg · L4

dist/packages/registry.jsView file

Lines 168-208javascript

168}

169/**

170 * Install the latest version of an npm-global package.

171 *

172 * A previously interrupted install can leave `.<pkg>-<hash>` staging dirs in the

173 * npm global root that make the next install fail with ENOTEMPTY/ENOTDIR, so

174 * those are pre-cleaned and the install is retried once after removing the

175 * half-written package directory. Returns null on success, or the error text.

176 */

177function

dist/agent/dreaming/migrate.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 16

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agent/dreaming/migrate.js#virtual:normalized:round1View on unpkg

dist/cron/manager.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/cron/manager.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cron/manager.jsView on unpkg

dist/api/gateway-router.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/api/gateway-router.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api/gateway-router.jsView on unpkg

dist/apps/agent-manager.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/apps/agent-manager.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/agent-manager.jsView on unpkg

dist/apps/installer.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/apps/installer.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/installer.jsView on unpkg

dist/apps/socket-server.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/apps/socket-server.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/socket-server.jsView on unpkg

dist/cli/commands/gateway.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/cli/commands/gateway.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/gateway.jsView on unpkg

dist/session/compactor.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/session/compactor.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/session/compactor.jsView on unpkg

dist/telegram/receiver.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/telegram/receiver.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/telegram/receiver.jsView on unpkg

dist/agent/skill-learning/reviewer.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/agent/sk[redacted]/reviewer.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/agent/skill-learning/reviewer.jsView on unpkg

dist/api/line-webhook-router.jsView file

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/api/line-webhook-router.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api/line-webhook-router.jsView on unpkg

Source & flagged code

20 flagged · loading source

package.jsonView file

•scripts.postinstall = if command -v bun >/dev/null 2>&1; then bun install --cwd mcp; else echo 'Warning: bun not found. Run `cd mcp && bun install` manually to enable MCP tools.'; fi

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = if command -v bun >/dev/null 2>&1; then bun install --cwd mcp; else echo 'Warning: bun not found. Run `cd mcp && bun install` manually to enable MCP tools.'; fi

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/discord/receiver.jsView file

36exports.DiscordReceiver = void 0; L37: const child_process_1 = require("child_process"); L38: const path = __importStar(require("path"));

High

Child Process

Package source references child process execution.

dist/discord/receiver.jsView on unpkg · L36

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/discord/receiver.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/discord/receiver.jsView on unpkg

dist/webhook/manager.jsView file

48exports.getWebhookInfo = getWebhookInfo; L49: const https = __importStar(require("https")); L50: const http = __importStar(require("http"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/webhook/manager.jsView on unpkg · L48

dist/api/router.jsView file

447}; L448: const TELEGRAM_API_BASE = process.env.TELEGRAM_API_BASE ?? 'https://api.telegram.org'; L449: /** Max simultaneous wizard/start Claude subprocesses to prevent resource exhaustion. */ ... L454: return new Promise((resolve, reject) => { L455: const child = (0, child_process_1.spawn)('claude', ['--print', '--dangerously-sk[redacted]'], { L456: env: { ...process.env },

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/api/router.jsView on unpkg · L447

dist/connectors/mcp-oauth.js#virtual:normalized:round1View file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/connectors/mcp-oauth.js#virtual:normalized:round1View on unpkg · L4

dist/packages/registry.jsView file

188try { L189: (0, child_process_1.execSync)(`npm install -g ${packageName}@latest`, { stdio: ['pipe', 'pipe', 'pipe'], timeout: 300000 }); L190: return null;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/packages/registry.jsView on unpkg · L188

•matchType = normalized_sha256 matchedPackage = @0xmaxma/claude-gateway@1.8.14 matchedPath = dist/packages/registry.js matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.8.14 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/packages/registry.jsView on unpkg

dist/agent/dreaming/migrate.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 16

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agent/dreaming/migrate.js#virtual:normalized:round1View on unpkg

dist/cron/manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cron/manager.jsView on unpkg

dist/api/gateway-router.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api/gateway-router.jsView on unpkg

dist/apps/agent-manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/agent-manager.jsView on unpkg

dist/apps/installer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/installer.jsView on unpkg

dist/apps/socket-server.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/socket-server.jsView on unpkg

dist/cli/commands/gateway.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/gateway.jsView on unpkg

dist/session/compactor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/session/compactor.jsView on unpkg

dist/telegram/receiver.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/telegram/receiver.jsView on unpkg

dist/agent/skill-learning/reviewer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/agent/skill-learning/reviewer.jsView on unpkg

dist/api/line-webhook-router.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api/line-webhook-router.jsView on unpkg

Source & flagged code

20 flagged

package.jsonView file

Lines 12-52json

12 },

13 "engines": {

14 "node": ">=22"

15 },

16 "files": [

17 "dist/",

18 "lib/",

19 "resource/",

20 "mcp/",

21 "!mcp/node_modules",

22 "!mcp/node_modules/**",

23 "README.md",

24 "config.template.json"

25 ],

26 "publishConfig": {

27 "access": "public"

28 },

29 "scripts": {

30 "build": "tsc",

31 "start": "node --no-warnings=ExperimentalWarning --env-file-if-exists=.env dist/entry.js gateway start",

32 "postinstall": "if command -v bun >/dev/null 2>&1; then bun install --cwd mcp; else echo 'Warning: bun not found. Run `cd mcp && bun install` manually to enable MCP tools.'; fi",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L32

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 "pretest": "npm run build",

34 "test": "NODE_OPTIONS=--max-old-space-size=2560 jest",

35 "pretest:unit": "npm run build",

36 "test:unit": "jest --testPathPattern=unit",

37 "test:e2e": "jest --testPathPattern=tests/e2e --forceExit",

38 "integration": "jest --testPathPattern=integration --testTimeout=15000",

39 "integration:ma": "jest --testPathPattern=multi-agent --testTimeout=15000",

40 "test:manual": "jest --testPathPattern=phase-manual --testTimeout=15000",

41 "integration:hb": "jest --testPathPattern=heartbeat-e2e --testTimeout=15000",

42 "integration:cs": "jest --testPathPattern=character-system --testTimeout=15000",

43 "typecheck": "tsc --noEmit",

44 "gen-cli": "ts-node scripts/gen-cli.ts",

45 "gen-cli:check": "ts-node scripts/gen-cli.ts --check"

46 },

47 "dependencies": {

48 "@line/bot-sdk": "^11.0.2",

49 "@whiskeysockets/baileys": "^6.7.24",

50 "@xterm/headless": "^6.0.0",

51 "chokidar": "^3.5.0",

52 "cron-parser": "^5.5.0",

dist/discord/receiver.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys

dist/webhook/manager.jsView file

Lines 28-68javascript

28var __importStar = (this && this.__importStar) || (function () {

29 var ownKeys = function(o) {

30 ownKeys

dist/api/router.jsView file

Lines 427-467javascript

427function detectMimeFromMagic(header) {

428 if (header[0] === 0xFF && header[1] === 0xD8 && header[2]

dist/connectors/mcp-oauth.js#virtual:normalized:round1View file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/connectors/mcp-oauth.js#virtual:normalized:round1View on unpkg · L4

dist/packages/registry.jsView file

Lines 168-208javascript

168}

169/**

170 * Install the latest version of an npm-global package.

171 *

172 * A previously interrupted install can leave `.<pkg>-<hash>` staging dirs in the

173 * npm global root that make the next install fail with ENOTEMPTY/ENOTDIR, so

174 * those are pre-cleaned and the install is retried once after removing the

175 * half-written package directory. Returns null on success, or the error text.

176 */

177function

dist/agent/dreaming/migrate.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 16

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agent/dreaming/migrate.js#virtual:normalized:round1View on unpkg

dist/cron/manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cron/manager.jsView on unpkg

dist/api/gateway-router.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api/gateway-router.jsView on unpkg

dist/apps/agent-manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/agent-manager.jsView on unpkg

dist/apps/installer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/installer.jsView on unpkg

dist/apps/socket-server.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/apps/socket-server.jsView on unpkg

dist/cli/commands/gateway.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/gateway.jsView on unpkg

dist/session/compactor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/session/compactor.jsView on unpkg

dist/telegram/receiver.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/telegram/receiver.jsView on unpkg

dist/agent/skill-learning/reviewer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/agent/skill-learning/reviewer.jsView on unpkg

dist/api/line-webhook-router.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api/line-webhook-router.jsView on unpkg

@0xmaxma/claude-gateway@1.8.11

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code