@claudiolabs/claudin@1.1.12: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@claudiolabs/claudin@1.1.12: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/cli-1.1.12-ss7r3f1r.mjsView file

1patternName = generic_password severity = medium line = 1 matchedText = import{x...tml>

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/cli-1.1.12-ss7r3f1r.mjsView on unpkg · L1

dist/chunks/cli-1.1.12-mrjjav4s.mjsView file

1import{M1 as MO,P1 as PF}from"./cli-1.1.12-nfb55a30.mjs";import{$1 as q0,Q1 as p9,R1 as E9,S1 as g9,T1 as Q6,U1 as L1,V1 as kG,W1 as SZ,X1 as AB,Y1 as EQ,Z1 as MB,_1 as Z6,a2 as JV... L2: `)G.name="enter";else if(Z==="\t")G.name="tab";else if(Z==="\b"||Z==="\x1B\b")G.name="backspace",G.meta=Z.charAt(0)==="\x1B";else if(Z===""||Z==="\x1B")G.name="backspace",G.meta=...

High

Child Process

Package source references child process execution.

dist/chunks/cli-1.1.12-mrjjav4s.mjsView on unpkg · L1

dist/chunks/cli-1.1.12-5dbxwy0d.mjsView file

778L779: 5. **Synthesize one report.** Merge duplicate findings across angles, resolve or surface disagreements, and write a single structured answer. Rank or tag claims by confidence (e.g.... L780: ... L785: L786: You run in an isolated context: the parent sees only your final report, not your workers' intermediate output. Make the report self-contained.`}var ak9="WebResearcherManager",ok9,N... L787: Resume this session with:

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.12-5dbxwy0d.mjsView on unpkg · L778

61- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L62: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var A9="Read",v$="File unchanged since last read. The content from the earlier Read tool_result in... L63: - Allows Claude to search the web and use the results to inform responses ... L77: Sources: L78: - [Source Title 1](https://example.com/1) L79: - [Source Title 2](https://example.com/2) ... L137: - Use this tool when you need to find files by name patterns L138: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var A7=()=>{};var l8="PowerShell";var UK=()=>{};fun... L139: ${Z.split(` ... L23

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.12-5dbxwy0d.mjsView on unpkg · L61

dist/chunks/cli-1.1.12-w367zd8v.mjsView file

1import{C2 as qJ,F2 as VJ}from"./cli-1.1.12-24hecrkb.mjs";import{Cba as ZJ,Eba as jJ,Mga as q,Qea as U,R$ as YJ,S$ as TJ,S_ as W,T_ as f,Tda as $J,Uga as u,aea as AJ,mfa as m,vba as... L2: exec "${J}/node_modules/.bin/claudin" "$@"`,493))await vJ(Q,493);return!0}catch(J){return q(J),!1}}async function JQ(J,Q){try{if(!await OJ())return"install_failed";let Z=await W("n... L3: `)}catch(Q){if(n(Q))return null;throw Q}}async function l(J,Q){let Y=await MJ(J,"w");try{await Y.writeFile(Q.join(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/cli-1.1.12-w367zd8v.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.12-c40rcer1.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.897 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.12-c40rcer1.mjsView on unpkg

dist/chunks/openaiShim-1.1.12-fhkx69xv.mjsView file

11patternName = generic_password severity = medium line = 11 matchedText = [Content...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.12-fhkx69xv.mjs

dist/chunks/openaiShim-1.1.12-fhkx69xv.mjsView on unpkg · L11