registry / @cakagus/codeclaw / 1.7.1
@cakagus/codeclaw@1.7.1
**CodeClaw** is a lightweight AI Agent and Telegram Bot for autonomous coding, real-time trading (XAU/USD), and continuous learning. It runs efficiently on low-resource VPS environments.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe flagged credential flows use configured keys with their corresponding services, and reports go to the configured Telegram chat. The package has no install lifecycle scripts, and the inspected audio path transcribes voice notes received by the bot.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
User-invoked application commands or receipt of a voice note by the configured Telegram bot.
Impact
Expected application data is sent to the selected services; no unrelated credential collection or hidden exfiltration was identified.
Mechanism
Uses configured service credentials to fetch market information, send reports to the configured Telegram chat, and transcribe received audio through Groq.
AI rationale
The flagged credential flows use configured keys with their corresponding services, and reports go to the configured Telegram chat. The package has no install lifecycle scripts, and the inspected audio path transcribes voice notes received by the bot.
Evidence
config.jsongold.log
Network endpoints7
api.exa.aiapi.groq.comapi.telegram.orgnfs.faireconomy.mediahtml.duckduckgo.comtwelvedata.comfred.stlouisfed.org
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares no install lifecycle scripts; its scripts are user-invoked commands.
- Gold analysis reads Twelve Data, Exa, and Telegram credentials from the package configuration.
- Gold analysis sends its report only to the configured Telegram chat and only when run with notifications enabled.
- Audio transcription sends a Telegram voice note to Groq using a configured Groq key or GROQ_API_KEY.
Evidence against
- The package makes network requests during its application features.
- The doctor command can run shell checks and offers opt-in fixes, including PM2 setup.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
10 flaggedtelegram.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @cakagus/codeclaw@1.4.3
matchedIdentity = npm:QGNha2FndXMvY29kZWNsYXc:1.4.3
similarity = 0.830
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
telegram.jsView on unpkg275await tg.sendMessage(chatId, "⏳ Mengambil data real-time XAU/USD...").catch(() => {});
L276: const { spawn } = await import("node:child_process");
L277: const output = await new Promise((resolve) => {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
telegram.jsView on unpkg · L275lib/doctor.jsView file
•matchType = normalized_sha256
matchedPackage = @cakagus/codeclaw@1.5.2
matchedPath = lib/doctor.js
matchedIdentity = npm:QGNha2FndXMvY29kZWNsYXc:1.5.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
1 Critical6 High6 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationscripts/gold-analysis.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedlib/research.js#virtual:normalized:round1
HighKnown Malware Source Similaritylib/tools.js
HighKnown Malware Source Similaritylib/doctor.js
HighKnown Malware Source Similarityscripts/gen-badges.mjs
HighKnown Malware Source Similaritylib/research.js
HighPrevious Version Dangerous Deltatelegram.js
MediumDynamic Requiretelegram.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/doctor.js
MediumShips Build Helperbin/tokenobral-deploy.sh
Affected versions and remediation
This report applies to @cakagus/codeclaw@1.7.1.
See all versions of @cakagus/codeclaw for other recorded verdicts.
- Review the evidence and your use of @cakagus/codeclaw@1.7.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.