@claudiolabs/claudin: Suspicious npm security report (Warn)

Loading npm security reports…

@claudiolabs/claudin: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

22 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-arm64-musl": "1.1.39",

36 "@claudiolabs/claudin-win32-x64": "1.1.39",

37 "@claudiolabs/claudin-linux-arm64": "1.1.39",

38 "@claudiolabs/claudin-darwin-x64": "1.1.39",

39 "@claudiolabs/claudin-linux-x64-musl": "1.1.39",

40 "@claudiolabs/claudin-win32-arm64": "1.1.39",

41 "@claudiolabs/claudin-darwin-arm64": "1.1.39",

42 "@claudiolabs/claudin-linux-x64": "1.1.39"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/openaiShim-1.1.39-jnp9fkcv.mjsView file

Lines 1-15javascript

1import{Oi as Y0,Pi as Y1}from"./cli-1.1.39-c86mbrv2.mjs";import{Si as c$,Ui as J1}from"./cli-1.1.39-f2qc1x1n.mjs";import{Ak as rZ,Ao as tZ,Bk as A$,Bo as $1,EQ

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView file

575L576: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var $U;var JS=R(()=>{X7();UY();rZ(... L577: Resume this session with:

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L575

1import{fT as cP9,gT as YFZ}from"./cli-1.1.39-nnc7eg6p.mjs";import{BT as sW9,HT as tW9,hT as cW9,jT as dW9,kT as lW9,lT as Cn,mT as iW9,nT as EE,oT as AG9,pT as MG9,qT as RG9,rT as ... L2: ... L13: - Watch/interactive flags (--watch, --ui) are stripped so the run terminates. L14: - Use plain Bash only when you need raw output or a non-test command.`,cL0="Run the project's test suite and get back a failures-first summary: counts, and for each failure the tes... L15: ... L119: Sources: L120: - [Source Title 1](https://example.com/1) L121: - [Source Title 2](https://example.com/2) ... L191: - HTTP is upgraded to HTTPS. Cross-host redirects are returned to you rather than followed; call again with the redirect URL. L192: - Large pages may be summarized. Responses are cached for 15 minutes

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L1

dist/chunks/cli-1.1.39-5ge6mqxz.mjsView file

Lines 1-21javascript

1import{dka as gt,oka as Wu}from"./cli-1.1.39-e4p7vgrg.mjs";import{Mqa as kn,Nqa as j,Oqa as it}from"./cli-1.1.39-z8ts6axr.mjs";function rt(n){let r

dist/chunks/bridgeMain-1.1.39-488k7mc8.mjsView file

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.39-488k7mc8.mjs spawns dist/chunks/cli-1.1.39-24z9gjkg.mjs; helper contains network access plus dynamic code execution. L1: import{Aa as oz,Ca as rz,Da as nz,Ea as iz,Fa as sz,xa as cz,ya as Nz,za as az}from"./cli-1.1.39-5xkhxv1a.mjs";import{$a as BJ,ab as Lz,bb as CJ,cb as kz,db as hz,eb as FJ,fb as NJ... L2: `).filter((W)=>W.length>0)}function tz(z){let J=z.write??((Z)=>process.stdout.write(Z)),W=z.verbose,$=0,q="idle",K="Ready",_="",B="",E="",O="",w="",U=null,N=[],f=!1,A=null,F=0,x=0,... L3: `)){if(e.length===0){L++;continue}let $z=uz(e);L+=Math.max(1,Math.ceil($z/G))}if(Z.endsWith(` ... L31: `),Z)k(`${H.red(Z)} L32: `)},updateSessionStatus(Z,G,L,e){if(L.type==="tool_start")A=L.summary,F=Date.now();g()},clearStatus(){d(),zz()

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.39-488k7mc8.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.39-7tchegvs.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-vypd5zf6.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-7tchegvs.mjsView on unpkg

dist/chunks/cli-1.1.39-c6mm3w1n.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-55ayan24.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 32 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-c6mm3w1n.mjsView on unpkg

dist/chunks/cli-1.1.39-2gzgjcxr.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-01erqdx7.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-2gzgjcxr.mjsView on unpkg

dist/chunks/cli-1.1.39-2k0w4c3v.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-32vewh62.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-2k0w4c3v.mjsView on unpkg

dist/chunks/cli-1.1.39-3yy2wxqa.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-hxty6b5t.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-3yy2wxqa.mjsView on unpkg

Source & flagged code

22 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/openaiShim-1.1.39-jnp9fkcv.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/openaiShim-1.1.39-jnp9fkcv.mjsView on unpkg · L11

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L575

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L1

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.38 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.38 similarity = 0.825 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg

734$commands -join [char]0 L735: `.trim(),q=await L9("powershell.exe",["-NoProfile","-Command",X],{timeout:3000});if(q.code!==0||!q.stdout?.trim())return[];return q.stdout.split("\x00").filter(Boolean)}let Q=`curr... L736: `).map((H)=>H.trim())}let W=Z.split(Pf).pop();if(!W)return null;let G=W.replace(".lock","");return{workspaceFolders:Q,port:parseInt(G),pid:Y,ideName:X,useWebSocket:q,runningInWindo...

High

Child Process

Package source references child process execution.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L734

191- HTTP is upgraded to HTTPS. Cross-host redirects are returned to you rather than followed; call again with the redirect URL. L192: - Large pages may be summarized. Responses are cached for 15 minutes per URL.`;var V4=()=>{};var l8="PowerShell";var bq=()=>{};function r_(){if(Z9()!=="windows")return!1;return l(p... L193: `).map((J)=>J.trim()).join(`

High

Shell

Package source references shell execution.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L191

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L575

13- Watch/interactive flags (--watch, --ui) are stripped so the run terminates. L14: - Use plain Bash only when you need raw output or a non-test command.`,cL0="Run the project's test suite and get back a failures-first summary: counts, and for each failure the tes... L15: ... L575: L576: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var $U;var JS=R(()=>{X7();UY();rZ(... L577: Resume this session with: ... L734: $commands -join [char]0 L735: `.trim(),q=await L9("powershell.exe",["-NoProfile","-Command",X],{timeout:3000});if(q.code!==0||!q.stdout?.trim())return[];return q.stdout.split("\x00").filter(Boolean)}let Q=`curr... L736: `).map((H)=>H.trim())}let W=Z.split(Pf).pop();if(!W)return

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L13

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg

•matchType = token_shingles matchedPackage = @mdevs/mai-cli@1.0.17 matchedPath = dist/chunks/loadAgentsDir-BWrBBncU.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.17 similarity = 1.000 shingleOverlap = 25 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg

209|| (${V} === "string" && ${X} && ${X} == +${X} && !(${X} % 1))`).assign(K,T8._`+${X}`);return;case"boolean":Y.elseIf(T8._`${X} === "false" || ${X} === 0 || ${X} === null`).assign(K... L210: || ${V} === "boolean" || ${X} === null`).assign(K,T8._`[${X}]`)}}}function rm9({gen:Z,parentData:J,parentDataProperty:Q},Y){Z.if(T8._`${J} !== undefined`,()=>Z.assign(T8._`${J}[${Q... L211: missingProperty: ${Y},

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L209

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L1

dist/chunks/cli-1.1.39-5ge6mqxz.mjsView file

1import{dka as gt,oka as Wu}from"./cli-1.1.39-e4p7vgrg.mjs";import{Mqa as kn,Nqa as j,Oqa as it}from"./cli-1.1.39-z8ts6axr.mjs";function rt(n){let r=0;for(let $=0;$<n.length;$++)r=(... L2: `)}var l2,qg,lt,jt=(n,r)=>{n.name="$ZodError",qg.value=r,Object.defineProperty(n,"issues",qg),qg.value=void 0,Object.defineProperty(n,"message",l2);let $=Object.getPrototypeOf(n);i...

High

Eval

Package source references dynamic code evaluation.

dist/chunks/cli-1.1.39-5ge6mqxz.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.39-488k7mc8.mjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.39-488k7mc8.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.39-7tchegvs.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-7tchegvs.mjsView on unpkg

dist/chunks/cli-1.1.39-c6mm3w1n.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-c6mm3w1n.mjsView on unpkg

dist/chunks/cli-1.1.39-2gzgjcxr.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-2gzgjcxr.mjsView on unpkg

dist/chunks/cli-1.1.39-2k0w4c3v.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-2k0w4c3v.mjsView on unpkg

dist/chunks/cli-1.1.39-3yy2wxqa.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-3yy2wxqa.mjsView on unpkg

Source & flagged code

22 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-arm64-musl": "1.1.39",

36 "@claudiolabs/claudin-win32-x64": "1.1.39",

37 "@claudiolabs/claudin-linux-arm64": "1.1.39",

38 "@claudiolabs/claudin-darwin-x64": "1.1.39",

39 "@claudiolabs/claudin-linux-x64-musl": "1.1.39",

40 "@claudiolabs/claudin-win32-arm64": "1.1.39",

41 "@claudiolabs/claudin-darwin-arm64": "1.1.39",

42 "@claudiolabs/claudin-linux-x64": "1.1.39"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/openaiShim-1.1.39-jnp9fkcv.mjsView file

Lines 1-15javascript

1import{Oi as Y0,Pi as Y1}from"./cli-1.1.39-c86mbrv2.mjs";import{Si as c$,Ui as J1}from"./cli-1.1.39-f2qc1x1n.mjs";import{Ak as rZ,Ao as tZ,Bk as A$,Bo as $1,EQ

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L575

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.39-yyqx9zb5.mjsView on unpkg · L1

dist/chunks/cli-1.1.39-5ge6mqxz.mjsView file

Lines 1-21javascript

1import{dka as gt,oka as Wu}from"./cli-1.1.39-e4p7vgrg.mjs";import{Mqa as kn,Nqa as j,Oqa as it}from"./cli-1.1.39-z8ts6axr.mjs";function rt(n){let r

dist/chunks/bridgeMain-1.1.39-488k7mc8.mjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.39-488k7mc8.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.39-7tchegvs.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-7tchegvs.mjsView on unpkg

dist/chunks/cli-1.1.39-c6mm3w1n.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-c6mm3w1n.mjsView on unpkg

dist/chunks/cli-1.1.39-2gzgjcxr.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-2gzgjcxr.mjsView on unpkg

dist/chunks/cli-1.1.39-2k0w4c3v.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-2k0w4c3v.mjsView on unpkg

dist/chunks/cli-1.1.39-3yy2wxqa.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.39-3yy2wxqa.mjsView on unpkg

@claudiolabs/claudin@1.1.39

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code