registry / @adithyasak/t3 / 0.0.44-adi.1
@adithyasak/t3@0.0.44-adi.1
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe required locations contain application session handling and syntax-highlighting data, with no concrete malicious chain identified. Inspected execution and authentication behavior is package-aligned, supporting a clean static review.
Static reason
High-risk behavior combination matched malicious policy.; source closely matched a different package identity
Trigger
Explicit CLI execution or application session operations; no npm install hook is present.
Impact
No malicious configuration takeover, credential export to an unrelated recipient, or destructive install behavior was established.
Mechanism
The worker resolves Claude session storage and performs requested history operations; the browser asset exports grammar data.
AI rationale
The required locations contain application session handling and syntax-highlighting data, with no concrete malicious chain identified. Inspected execution and authentication behavior is package-aligned, supporting a clean static review.
Network endpoints1
api.openai.com/v1/models
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the t3 CLI and contains no install lifecycle hooks or runtime self-dependency.
- The flagged Claude directory reference resolves the user's configured Claude home for session operations.
- The flagged browser asset parses and exports Blade syntax-highlighting grammar data.
- The Claude history worker accepts session read or fork operations and returns results through standard output.
- The CLI starts through an explicit entrypoint guard.
- The inspected authenticated model request sends its token to OpenAI's fixed API endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
13 flaggeddist/claudeHistoryWorker-CxNnUsAo.mjsView file
3import { createRequire } from "node:module";
L4: import * as sw from "node:child_process";
L5: import { execFile } from "node:child_process";
...
L16: import { EventEmitter, once, setMaxListeners } from "events";
L17: import Wxe from "https";
L18: import Gxe from "http";
...
L459: *
L460: * Each memoized wrapper owns a private `WeakMap` keyed by object identity.
L461: *
...
L568: *
L569: * const data: unknown = "hi"
L570: *
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/claudeHistoryWorker-CxNnUsAo.mjsView on unpkg · L33import { createRequire } from "node:module";
L4: import * as sw from "node:child_process";
L5: import { execFile } from "node:child_process";
...
L16: import { EventEmitter, once, setMaxListeners } from "events";
L17: import Wxe from "https";
L18: import Gxe from "http";
...
L459: *
L460: * Each memoized wrapper owns a private `WeakMap` keyed by object identity.
L461: *
...
L568: *
L569: * const data: unknown = "hi"
L570: *
Critical
Reverse Shell
Source matches reverse-shell style process and socket wiring.
dist/claudeHistoryWorker-CxNnUsAo.mjsView on unpkg · L3Findings
2 Critical8 High6 Medium5 Low
CriticalCredential Exfiltrationdist/claudeHistoryWorker-CxNnUsAo.mjs
CriticalReverse Shelldist/claudeHistoryWorker-CxNnUsAo.mjs
HighChild Processdist/claudeHistoryWorker-CxNnUsAo.mjs
HighShell
HighEvaldist/claudeHistoryWorker-CxNnUsAo.mjs
HighCommand Output Exfiltrationdist/claudeHistoryWorker-CxNnUsAo.mjs
HighCloud Metadata Accessdist/claudeHistoryWorker-CxNnUsAo.mjs
HighObfuscated Payload Loaderdist/claudeHistoryWorker-CxNnUsAo.mjs
HighRemote Agent Bridgedist/claudeHistoryWorker-CxNnUsAo.mjs
HighPackage Source Clone Identity Mismatchdist/client/assets/blade-OEdTArYC.js
MediumNetwork
Affected versions and remediation
This report applies to @adithyasak/t3@0.0.44-adi.1.
See all versions of @adithyasak/t3 for other recorded verdicts.
- Review the evidence and your use of @adithyasak/t3@0.0.44-adi.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.