registry / @buzzni/happy-cli / 1.1.10-aplus.105

@buzzni/happy-cli

@1.1.10-aplus.105

A+ Dev Studio fork of slopus/happy. Mobile and Web client for Claude Code and Codex.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. Install-time activity only validates dependencies, unpacks bundled tools, and fixes a scoped node-pty permission; optional MCP networking requires an explicit environment URL.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall or explicit happy CLI runtime use

Impact

No unconsented exfiltration, remote payload execution, or foreign control-surface persistence confirmed.

Mechanism

Bundled-tool setup and opt-in MCP configuration

Rationale

The flagged primitives are consistent with this remote-development CLI's stated functions and are gated to install or explicit runtime use. Source inspection found no concrete malicious chain.

Evidence

package.jsonscripts/verify-bundled-deps.cjsscripts/unpack-tools.cjsscripts/fix-node-pty-perms.cjsdist/index-Wv0iVT1v.cjsbin/happy.mjstools/unpackednode_modules/node-pty/prebuilds/darwin-arm64/spawn-helpernode_modules/node-pty/prebuilds/darwin-x64/spawn-helper

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence with false-positive risk.

as Benign

medium

Evidence for block

Postinstall extracts bundled platform archives and changes executable bits.
Runtime CLI can create package-owned killall/pkill guard shims and prepend them to its process PATH.
Optional Aplus MCP configuration sends its token to a caller-supplied environment URL.

Evidence against

No preinstall/install hook, fixed credential gateway, or unconsented foreign AI-agent configuration mutation was found.
MCP configuration is skipped unless HAPPY_APLUS_MCP_CONFIG_URL is explicitly configured.
Postinstall scripts are limited to bundled-dependency validation, package tool extraction, and a macOS node-pty permission fix.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 53 file(s), 2.57 MB of source, external domains: 127.0.0.1, accounts.google.com, api.anthropic.com, api.cluster-fluster.com, api.deepseek.com, api.openai.com, auth.openai.com, bridge.invalid, claude.ai, console.anthropic.com, developers.google.com, dl.google.com, github.com, goo.gle, happy.engineering, oauth2.googleapis.com, registry.npmjs.org, saycode.ai, www.apple.com, www.googleapis.com

Source & flagged code

14 flagged

package.jsonView file

Lines 61-101json

61 "scripts",

62 "browser-extension",

63 "tools/archives",

64 "tools/licenses",

65 "package.json"

66 ],

67

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/happy.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { readFileSync } from 'fs';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

Findings

9 High8 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/happy.mjs

HighShellbin/happy.mjs

HighCredential Redirect Persistencedist/index-Wv0iVT1v.cjs

HighEntrypoint Foreign Package Code Overwritedist/index-Wv0iVT1v.cjs

HighSandbox Evasion Gated Capabilitydist/types-CTxAH9cH.cjs

HighCross File Remote Execution Contextdist/index-Wv0iVT1v.cjs

HighTrigger Reachable Persistencedist/index-Wv0iVT1v.cjs

HighShips High Entropy Blobtools/archives/difftastic-arm64-linux.tar.gz

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/index-Wv0iVT1v.cjs

Medium

LPM CLI

17// Check if we're already running with the flags L18: const hasNoWarnings = process.execArgv.includes('--no-warnings'); L19: const hasNoDeprecation = process.execArgv.includes('--no-deprecation');

High

Shell

Package source references shell execution.

bin/happy.mjsView on unpkg · L17

dist/index-Wv0iVT1v.cjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index-Wv0iVT1v.cjs: var node_readline = require('node:readline'); var promises$1 = require('node:readline/promises'); this.claudeEnvVars = opts.claudeEnvVars; this.claudeArgs = opts.claudeArgs; if (!this.claudeArgs) return; for (let i = 0; i < this.claudeArgs.length; i++) { const arg = this.claudeArgs[i]; if (i + 1 < this.claudeArgs.length) {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-Wv0iVT1v.cjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index-Wv0iVT1v.cjs: Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) console.log(`Report issues: ${chalk.blue("https://github.com/slopus/happy-cli/issues")}`); console.log(`Documentation: ${chalk.blue("https://happy.engineering/")}`); await node_fs.promises.writeFile(tmp, JSON.stringify(data, null, 2), "utf-8"); await node_fs.promises.writeFile( await node_fs.promises.writeFile(path.join(userHomeDir.name, "daemon.state.json"), state, { mode: 384 }); await promises.writeFile(markerPath, String(now), { mode: 384 });

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index-Wv0iVT1v.cjsView on unpkg

15

dist/types-CTxAH9cH.cjsView file

2L3: var axios = require('axios'); L4: var chalk = require('chalk'); ... L15: var tweetnacl = require('tweetnacl'); L16: var child_process = require('child_process'); L17: var util = require('util'); ... L123: "tools/licenses", L124: "package.json" L125: ]; ... L151: "@slopus/happy-wire": "file:../happy-wire", L152: "@stablelib/base64": "^2.0.1", L153: "@stablelib/hex": "^2.0.1",

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/types-CTxAH9cH.cjsView on unpkg · L2

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

Network

MediumEnvironment Vars

MediumInstall Persistencedist/index-Wv0iVT1v.cjs

MediumShips Build Helperscripts/download-tools.sh

MediumShips Compressed Blobtools/archives/difftastic-arm64-linux.tar.gz

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Artifact115 MB · 1,164 files1 signature(s) · provenance

Install lifecyclepostinstallprepublishOnly

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocketHighEntropyStringsUrlStringsManifest: clean

Cross-file remote execution chain: dist/index-Wv0iVT1v.cjs spawns scripts/claude_local_launcher.cjs; helper contains network access plus dynamic code execution. L15: var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L16: var axios = require('axios'); L17: var node_events = require('node:events'); ... L20: var os$1 = require('os'); L21: var child_process = require('child_process'); L22: var happyWire = require('@slopus/happy-wire'); ... L252: try { L253: const parsed = JSON.parse(v); L254: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x ... L310: function getClaudeSettingsPath() { L311: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L312: return path.join(claudeConfigDir, "settings.json");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-Wv0iVT1v.cjsView on unpkg · L15

15Trigger-reachable persistence chain: manifest.main -> dist/index.cjs -> dist/index-Wv0iVT1v.cjs L15: var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L16: var axios = require('axios'); L17: var node_events = require('node:events'); ... L20: var os$1 = require('os'); L21: var child_process = require('child_process'); L22: var happyWire = require('@slopus/happy-wire'); ... L252: try { L253: const parsed = JSON.parse(v); L254: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x ... L310: function getClaudeSettingsPath() { L311: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L312: return path.join(claudeConfigDir, "settings.json");

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index-Wv0iVT1v.cjsView on unpkg · L15

2L3: var chalk = require('chalk'); L4: var node_crypto = require('node:crypto');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index-Wv0iVT1v.cjsView on unpkg · L2

15var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L16: var axios = require('axios'); L17: var node_events = require('node:events'); ... L20: var os$1 = require('os'); L21: var child_process = require('child_process'); L22: var happyWire = require('@slopus/happy-wire'); ... L252: try { L253: const parsed = JSON.parse(v); L254: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x ... L310: function getClaudeSettingsPath() { L311: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L312: return path.join(claudeConfigDir, "settings.json");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index-Wv0iVT1v.cjsView on unpkg · L15

Source & flagged code

14 flagged

package.jsonView file

Lines 61-101json

61 "scripts",

62 "browser-extension",

63 "tools/archives",

64 "tools/licenses",

65 "package.json"

66 ],

67

"scripts"

: {

68 "cli": "tsx src/index.ts",

69 "dev": "tsx src/index.ts",

70 "typecheck": "tsc --noEmit",

71 "bundle:server": "node scripts/bundle-server.cjs",

72 "bundle:server:all": "node scripts/bundle-server.cjs --all-platforms",

73 "bundle:webapp": "node scripts/bundle-webapp.cjs",

74 "build": "shx rm -rf dist && tsc --noEmit && pkgroll && node scripts/copy-browser-extension.cjs",

75 "test": "pnpm run build && vitest run --project unit",

76 "test:integration": "pnpm run build && vitest run --project integration-empty --project integration-plan-mode --project integration-authenticated",

77 "cli:install": "node scripts/install-local.cjs",

78 "prepare:publish": "node scripts/prepare-publish-package.cjs",

79 "guard:publish": "node scripts/guard-publish-artifact.cjs",

80 "prepublishOnly": "node scripts/assert-publish-tool.cjs && node scripts/guard-publish-artifact.cjs . --install-smoke",

81 "postinstall": "node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L81

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L81

82 },

83 "dependencies": {

84 "@agentclientprotocol/sdk": "^0.14.1",

85 "@anthropic-ai/claude-agent-sdk": "^0.3.179",

86 "@anthropic-ai/sandbox-runtime": "^0.0.37",

87 "@anthropic-ai/sdk": "0.96.0",

88 "@modelcontextprotocol/sdk": "1.29.0",

89 "@noble/ed25519": "^3.0.0",

90 "@noble/hashes": "^2.0.1",

91 "@paralleldrive/cuid2": "^2.2.2",

92 "@slopus/happy-wire": "0.1.0",

93 "@stablelib/base64": "^2.0.1",

94 "@stablelib/hex": "^2.0.1",

95 "@types/cross-spawn": "^6.0.6",

96 "@types/http-proxy": "^1.17.17",

97 "@types/qrcode-terminal": "^0.12.2",

98 "@types/react": "^19.2.7",

99 "@types/tmp": "^0.2.6",

100 "ai": "^5.0.107",

101 "axios": "^1.13.2",

bin/happy.mjsView file

Lines 1-37javascript

1#!/usr/bin/env node

2

3import { execFileSync } from 'child_process';

4import { readFileSync } from 'fs';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

5import { fileURLToPath } from

dist/index-Wv0iVT1v.cjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index-Wv0iVT1v.cjs: var node_readline = require('node:readline'); var promises$1 = require('node:readline/promises'); this.claudeEnvVars = opts.claudeEnvVars; this.claudeArgs = opts.claudeArgs; if (!this.claudeArgs) return; for (let i = 0; i < this.claudeArgs.length; i++) { const arg = this.claudeArgs[i]; if (i + 1 < this.claudeArgs.length) {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-Wv0iVT1v.cjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index-Wv0iVT1v.cjs: Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) console.log(`Report issues: ${chalk.blue("https://github.com/slopus/happy-cli/issues")}`); console.log(`Documentation: ${chalk.blue("https://happy.engineering/")}`); await node_fs.promises.writeFile(tmp, JSON.stringify(data, null, 2), "utf-8"); await node_fs.promises.writeFile( await node_fs.promises.writeFile(path.join(userHomeDir.name, "daemon.state.json"), state, { mode: 384 }); await promises.writeFile(markerPath, String(now), { mode: 384 });

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index-Wv0iVT1v.cjsView on unpkg

15

dist/types-CTxAH9cH.cjsView file

Lines 1-22javascript

1'use strict';

2

3var axios = require('axios');

4var chalk = require('chalk');

5var node_fs = require

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

'url'

;

6import { join, dirname } from 'path';

7

8const projectRoot = dirname(dirname(fileURLToPath(import.meta.url)));

9const cliArgs = process.argv.slice(2);

10

11if (cliArgs.length === 1 && (cliArgs[0] === '--version' || cliArgs[0] === '-v')) {

12 const packageJson = JSON.parse(readFileSync(join(projectRoot, 'package.json'), 'utf8'));

13 console.log(`happy version: ${packageJson.version}`);

14 process.exit(0);

15}

16

17// Check if we're already running with the flags

18const hasNoWarnings = process.execArgv.includes('--no-warnings');

19const hasNoDeprecation = process.execArgv.includes('--no-deprecation');

High

Shell

Package source references shell execution.

bin/happy.mjsView on unpkg · L17

20

21if (!hasNoWarnings || !hasNoDeprecation) {

22 // Get path to the actual CLI entrypoint

23 const entrypoint = join(projectRoot, 'dist', 'index.mjs');

24

25 // Execute the actual CLI directly with the correct flags

26 try {

27 execFileSync(process.execPath, [

28 '--no-warnings',

29 '--no-deprecation',

30 entrypoint,

31 ...cliArgs

32 ], {

33 stdio: 'inherit',

34 env: process.env

35 });

36 } catch (error) {

37 // execFileSync throws if the process exits with non-zero

Cross-file remote execution chain: dist/index-Wv0iVT1v.cjs spawns scripts/claude_local_launcher.cjs; helper contains network access plus dynamic code execution. L15: var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L16: var axios = require('axios'); L17: var node_events = require('node:events'); ... L20: var os$1 = require('os'); L21: var child_process = require('child_process'); L22: var happyWire = require('@slopus/happy-wire'); ... L252: try { L253: const parsed = JSON.parse(v); L254: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x ... L310: function getClaudeSettingsPath() { L311: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L312: return path.join(claudeConfigDir, "settings.json");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-Wv0iVT1v.cjsView on unpkg · L15

15Trigger-reachable persistence chain: manifest.main -> dist/index.cjs -> dist/index-Wv0iVT1v.cjs L15: var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L16: var axios = require('axios'); L17: var node_events = require('node:events'); ... L20: var os$1 = require('os'); L21: var child_process = require('child_process'); L22: var happyWire = require('@slopus/happy-wire'); ... L252: try { L253: const parsed = JSON.parse(v); L254: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x ... L310: function getClaudeSettingsPath() { L311: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L312: return path.join(claudeConfigDir, "settings.json");

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index-Wv0iVT1v.cjsView on unpkg · L15

2L3: var chalk = require('chalk'); L4: var node_crypto = require('node:crypto');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index-Wv0iVT1v.cjsView on unpkg · L2

15var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L16: var axios = require('axios'); L17: var node_events = require('node:events'); ... L20: var os$1 = require('os'); L21: var child_process = require('child_process'); L22: var happyWire = require('@slopus/happy-wire'); ... L252: try { L253: const parsed = JSON.parse(v); L254: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x ... L310: function getClaudeSettingsPath() { L311: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L312: return path.join(claudeConfigDir, "settings.json");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index-Wv0iVT1v.cjsView on unpkg · L15

(

'node:fs'

);

6var os = require('node:os');

7var path = require('node:path');

8var node_crypto = require('node:crypto');

9var promises = require('node:fs/promises');

10var node_util = require('node:util');

11var node_events = require('node:events');

12var socket_ioClient = require('socket.io-client');

13var z = require('zod');

14var happyWire = require('@slopus/happy-wire');

15var tweetnacl = require('tweetnacl');

16var child_process = require('child_process');

17var util = require('util');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/types-CTxAH9cH.cjsView on unpkg · L2

18var fs = require('fs/promises');

19var crypto = require('crypto');

20var path$1 = require('path');

21var spawn = require('cross-spawn');

22var url = require('url');