@claudiolabs/claudin@1.1.13: Suspicious npm security report

Loading npm security reports…

@claudiolabs/claudin@1.1.13: Suspicious npm security report | LPM Firewall

Source & flagged code

15 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.13",

36 "@claudiolabs/claudin-darwin-arm64": "1.1.13",

37 "@claudiolabs/claudin-win32-x64": "1.1.13",

38 "@claudiolabs/claudin-darwin-x64": "1.1.13",

39 "@claudiolabs/claudin-linux-x64": "1.1.13",

40 "@claudiolabs/claudin-linux-arm64": "1.1.13",

41 "@claudiolabs/claudin-win32-arm64": "1.1.13",

42 "@claudiolabs/claudin-linux-arm64-musl": "1.1.13"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/openaiShim-1.1.13-9ym9m1mj.mjsView file

Lines 1-15javascript

1import{Ai as WZ,yi as QZ,zi as W0}from"./cli-1.1.13-g8k8na90.mjs";import{Di as l$,Fi as J1}from"./cli-1.1.13-wje228e3.mjs";import{$Q as gZ,$q as D0,Bk as _$,Ck as e0,Hr as

dist/chunks/bridgeMain-1.1.13-8tn5vy8z.mjsView file

Lines 11-51javascript

11`);let Qz=A??U;if(Qz){m(`

12`);let Jz=$?$J(Qz):YJ(Qz),Kz=M?V.dim.italic("space to hide QR code"):V.dim.italic("space to show QR code"),r=f?V.dim.italic(" · w to toggle spawn mode"):"";m(`${V.dim(Jz)}

13`),m(`${Kz}${r}

14`)}}return{printBanner($,G){if(F=$.sessionIngressUrl,L=G,U=KJ(G,F),n(U),K)J(V.dim("Remote Control")+` v99.0.0

15`);if(K){if($.spawnMode!=="single-session")J(V.dim("Spawn mode: ")+`${$.spawnMode}

16`),J(V.dim("Max concurrent sessions: ")+`${$.maxSessions}

cli-wrapper.cjsView file

Lines 1-34javascript

1#!/usr/bin/env node

2// Fallback launcher for the @claudiolabs/claudin wrapper package.

3//

4// Normally the postinstall (install.cjs) hardlinks the native binary over

5// bin/claudin.exe, so this file is never invoked. It exists for environments

6// where postinstall doesn't run (--ignore-scripts): users can run

7// `node cli-wrapper.cjs` directly and pay the Node-process spawn overhead.

8//

9// If no native binary is available for this platform (unsupported OS/arch, or

10// --omit=optional), it falls back to the Node bundle (dist/cli.mjs) shipped in

dist/chunks/cli-1.1.13-kjdr6edt.mjsView file

Lines 1-16javascript

1import{f2 as qJ,i2 as VJ}from"./cli-1.1.13-snkbv1w2.mjs";import{Fda as AJ,Rea as m,_aa as U,aba as E,fba as ZJ,hba as TJ,pga as q,tea as w,u$ as

dist/chunks/cli-1.1.13-2mrqqgcm.mjsView file

Lines 1-21javascript

1import{Zga as Y6,bha as qB}from"./cli-1.1.13-kbf9vss4.mjs";import{jha as fq,kha as Z6,lha as Wk}from"./cli-1.1.13-h1v6cap9.mjs";import{Hha as Iq,vha as s1}from"./cli-1.1.13-86kjp502.mjs"

dist/chunks/index-1.1.13-yncdgpnc.mjsView file

Lines 1-6javascript

1import{qsa as ve,rsa as L}from"./cli-1.1.13-pedv9sma.mjs";import{ssa as _e}from"./cli-1.1.13-284pjmzy.mjs";import{vsa as Ke,ysa as he,zsa as Se}from"./cli-1.1.13-6dcpjy34.mjs";

dist/chunks/index-1.1.13-vbws03kk.mjsView file

Lines 1-31javascript

1import{Csa as A,Fsa as v}from"./cli-1.1.13-jdcqc6bd.mjs";var D8=A((i)=>{var B1=i&&i.__assign||function(){

dist/chunks/defaultActionDeps-1.1.13-jyb9mebt.mjsView file

1import"./cli-1.1.13-rcgr5xjp.mjs";import{B as PG,C as BG,D as IZ,E as BZ,z as a}from"./cli-1.1.13-d54qh52e.mjs";import"./cli-1.1.13-pam922jf.mjs";import"./cli-1.1.13-e4hsds4b.mjs";... L2: `)),process.exit(1);if(pI()==="windows")process.stderr.write(Q.red(`Error: --tmux is not supported on Windows ... L26: 1. **Code review** — Invoke the \`${jB}\` tool with \`skill: "code-review"\` and \`args: "medium"\` to get a correctness-bug report on your changes, then fix every reported bug bef... L27: 2. **Run unit tests** — Run the project's test suite (check for package.json scripts, Makefile targets, or common commands like \`npm test\`, \`bun test\`, \`pytest\`, \`go test\`)... L28: 3. **Test end-to-end** — Follow the e2e test recipe from the coordinator's prompt (below). If the recipe says t

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/chunks/defaultActionDeps-1.1.13-jyb9mebt.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.13-epjmphrz.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.846 shingleOverlap = 33 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.13-epjmphrz.mjsView on unpkg

dist/chunks/cli-1.1.13-x79qava2.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/loadAgentsDir-Dt65bOMO.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.781 shingleOverlap = 25 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.13-x79qava2.mjsView on unpkg

dist/chunks/cli-1.1.13-psmq4bkh.mjsView file

1patternName = generic_password severity = medium line = 1 matchedText = import{u...tml>

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-1.1.13-psmq4bkh.mjs

dist/chunks/cli-1.1.13-psmq4bkh.mjsView on unpkg · L1

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/openaiShim-1.1.13-9ym9m1mj.mjsView file

11patternName = generic_password severity = medium line = 11 matchedText = [Content...in(`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/openaiShim-1.1.13-9ym9m1mj.mjsView on unpkg · L11

dist/chunks/bridgeMain-1.1.13-8tn5vy8z.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.12 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.12 similarity = 0.617 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.13-8tn5vy8z.mjsView on unpkg

31`),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a()},toggleQr(){M=!M,p()},updateSessionCount($,G,w){if(x===$&&N===G&&k===... L33: `);if(_.length>=sJ)_.shift();_.push(f)});if(F.stdout)HJ({input:F.stdout}).on("line",(f)=>{if(Z)Z.write(f+`

High

Child Process

Package source references child process execution.

dist/chunks/bridgeMain-1.1.13-8tn5vy8z.mjsView on unpkg · L31

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.13-8tn5vy8z.mjs spawns dist/chunks/cli-1.1.13-j98qjhp9.mjs; helper contains network access plus dynamic code execution. L1: import{nb as yJ,ob as xz,pb as rz,qb as cz,rb as iz,sb as kJ}from"./cli-1.1.13-2f0gzs1e.mjs";import{ub as Tz}from"./cli-1.1.13-6jy1pnge.mjs";import{Cb as EJ,Db as TJ,Eb as xJ,Fb as... L2: `).filter((K)=>K.length>0)}function VJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,_=[],M=!1,y=null,P=0,x=0,... L3: `)){if(Vz.length===0){w++;continue}let _z=sz(Vz);w+=Math.max(1,Math.ceil(_z/G))}if($.endsWith(` ... L31: `),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.13-8tn5vy8z.mjsView on unpkg · L1

cli-wrapper.cjsView file

14L15: const { spawnSync } = require('child_process') L16: const { arch, constants } = require('os')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

cli-wrapper.cjsView on unpkg · L14

dist/chunks/cli-1.1.13-kjdr6edt.mjsView file

1import{f2 as qJ,i2 as VJ}from"./cli-1.1.13-snkbv1w2.mjs";import{Fda as AJ,Rea as m,_aa as U,aba as E,fba as ZJ,hba as TJ,pga as q,tea as w,u$ as YJ,v$ as jJ,v_ as W,w_ as f,wda as ... L2: exec "${J}/node_modules/.bin/claudin" "$@"`,493))await BJ(Q,493);return!0}catch(J){return q(J),!1}}async function JQ(J,Q){try{if(!await OJ())return"install_failed";let Z=await W("n... L3: `)}catch(Q){if(n(Q))return null;throw Q}}async function l(J,Q){let Y=await MJ(J,"w");try{await Y.writeFile(Q.join(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/cli-1.1.13-kjdr6edt.mjsView on unpkg · L1

dist/chunks/cli-1.1.13-2mrqqgcm.mjsView file

1import{Zga as Y6,bha as qB}from"./cli-1.1.13-kbf9vss4.mjs";import{jha as fq,kha as Z6,lha as Wk}from"./cli-1.1.13-h1v6cap9.mjs";import{Hha as Iq,vha as s1}from"./cli-1.1.13-86kjp50... L2: `;try{$.appendFileSync(X,Y)}catch{try{$.mkdirSync(I_(X)),$.appendFileSync(X,Y)}catch{}}}function O_(){return process.env.CLAUDIN_DIAGNOSTICS_FILE}async function zv(Z,q,J){let X=Dat... ... L4: `;break;case"t":J+="\t";break;case"b":J+="\b";break;case'"':J+='"';break;case"\\":J+="\\";break;default:J+=Y;break}Q+=2;continue}if(Y==="\\"){J+="\\",Q+=2;continue}}J+=$,Q++}if(!X)... L5: `)){if(X.startsWith("#")||X.startsWith("^"))continue;let Q=X.indexOf(" ");if(Q===-1)continue;if(X.slice(Q+1)===q){let $=X.slice(0,Q);return J3($)?$:null}}}catch{}return null}async ... L6: `)Y-=1,H+=1;else if(U==="u"&&q[H+2]==="{

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunks/cli-1.1.13-2mrqqgcm.mjsView on unpkg · L1

dist/chunks/index-1.1.13-yncdgpnc.mjsView file

1import{qsa as ve,rsa as L}from"./cli-1.1.13-pedv9sma.mjs";import{ssa as _e}from"./cli-1.1.13-284pjmzy.mjs";import{vsa as Ke,ysa as he,zsa as Se}from"./cli-1.1.13-6dcpjy34.mjs";impo... L2: - loopback CIDR 127.0.0.0/8 or [::1/128] L3: - ECS container host 169.254.170.2 L4: - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:j})};ye.checkUrl=Ae});var Ce=H((B)=>{Object.defineProperty(B,"__esModule",{value:!0});B.resolveHttpHandlerRuntimeConf... L5: Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:f.logger});let n=new URL(j);(0,ut.checkUrl)(n,f.logger);let r=nt.NodeHttpHandler.create({...

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/index-1.1.13-yncdgpnc.mjsView on unpkg · L1

dist/chunks/index-1.1.13-vbws03kk.mjsView file

20contains invisible/control Unicode U+200B (zero width space) \v\f\r\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F !"#$٪&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~°·∙√▒─│┼┤┬├┴┐┌└┘β∞φ±½¼≈«»ﻷﻸ��ﻻﻼ� ﺂ£¤ﺄ��ﺎﺏﺕﺙ،ﺝﺡﺥ٠١٢٣٤٥٦٧٨٩ﻑ؛ﺱﺵﺹ؟

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/chunks/index-1.1.13-vbws03kk.mjsView on unpkg · L20

dist/chunks/defaultActionDeps-1.1.13-jyb9mebt.mjsView file

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/chunks/defaultActionDeps-1.1.13-jyb9mebt.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.13-epjmphrz.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.13-epjmphrz.mjsView on unpkg

dist/chunks/cli-1.1.13-x79qava2.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.13-x79qava2.mjsView on unpkg

dist/chunks/cli-1.1.13-psmq4bkh.mjsView file

1patternName = generic_password severity = medium line = 1 matchedText = import{u...tml>

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-1.1.13-psmq4bkh.mjs

dist/chunks/cli-1.1.13-psmq4bkh.mjsView on unpkg · L1

Source & flagged code

15 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.13",

36 "@claudiolabs/claudin-darwin-arm64": "1.1.13",

37 "@claudiolabs/claudin-win32-x64": "1.1.13",

38 "@claudiolabs/claudin-darwin-x64": "1.1.13",

39 "@claudiolabs/claudin-linux-x64": "1.1.13",

40 "@claudiolabs/claudin-linux-arm64": "1.1.13",

41 "@claudiolabs/claudin-win32-arm64": "1.1.13",

42 "@claudiolabs/claudin-linux-arm64-musl": "1.1.13"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/openaiShim-1.1.13-9ym9m1mj.mjsView file

Lines 1-15javascript

1import{Ai as WZ,yi as QZ,zi as W0}from"./cli-1.1.13-g8k8na90.mjs";import{Di as l$,Fi as J1}from"./cli-1.1.13-wje228e3.mjs";import{$Q as gZ,$q as D0,Bk as _$,Ck as e0,Hr as

dist/chunks/bridgeMain-1.1.13-8tn5vy8z.mjsView file

Lines 11-51javascript

11`);let Qz=A??U;if(Qz){m(`

12`);let Jz=$?$J(Qz):YJ(Qz),Kz=M?V.dim.italic("space to hide QR code"):V.dim.italic("space to show QR code"),r=f?V.dim.italic(" · w to toggle spawn mode"):"";m(`${V.dim(Jz)}

13`),m(`${Kz}${r}

14`)}}return{printBanner($,G){if(F=$.sessionIngressUrl,L=G,U=KJ(G,F),n(U),K)J(V.dim("Remote Control")+` v99.0.0

15`);if(K){if($.spawnMode!=="single-session")J(V.dim("Spawn mode: ")+`${$.spawnMode}

16`),J(V.dim("Max concurrent sessions: ")+`${$.maxSessions}

cli-wrapper.cjsView file

Lines 1-34javascript

1#!/usr/bin/env node

2// Fallback launcher for the @claudiolabs/claudin wrapper package.

3//

4// Normally the postinstall (install.cjs) hardlinks the native binary over

5// bin/claudin.exe, so this file is never invoked. It exists for environments

6// where postinstall doesn't run (--ignore-scripts): users can run

7// `node cli-wrapper.cjs` directly and pay the Node-process spawn overhead.

8//

9// If no native binary is available for this platform (unsupported OS/arch, or

10// --omit=optional), it falls back to the Node bundle (dist/cli.mjs) shipped in

dist/chunks/cli-1.1.13-kjdr6edt.mjsView file

Lines 1-16javascript

1import{f2 as qJ,i2 as VJ}from"./cli-1.1.13-snkbv1w2.mjs";import{Fda as AJ,Rea as m,_aa as U,aba as E,fba as ZJ,hba as TJ,pga as q,tea as w,u$ as

dist/chunks/cli-1.1.13-2mrqqgcm.mjsView file

Lines 1-21javascript

1import{Zga as Y6,bha as qB}from"./cli-1.1.13-kbf9vss4.mjs";import{jha as fq,kha as Z6,lha as Wk}from"./cli-1.1.13-h1v6cap9.mjs";import{Hha as Iq,vha as s1}from"./cli-1.1.13-86kjp502.mjs"

dist/chunks/index-1.1.13-yncdgpnc.mjsView file

Lines 1-6javascript

1import{qsa as ve,rsa as L}from"./cli-1.1.13-pedv9sma.mjs";import{ssa as _e}from"./cli-1.1.13-284pjmzy.mjs";import{vsa as Ke,ysa as he,zsa as Se}from"./cli-1.1.13-6dcpjy34.mjs";

dist/chunks/index-1.1.13-vbws03kk.mjsView file

Lines 1-31javascript

1import{Csa as A,Fsa as v}from"./cli-1.1.13-jdcqc6bd.mjs";var D8=A((i)=>{var B1=i&&i.__assign||function(){

dist/chunks/defaultActionDeps-1.1.13-jyb9mebt.mjsView file

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/chunks/defaultActionDeps-1.1.13-jyb9mebt.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.13-epjmphrz.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.13-epjmphrz.mjsView on unpkg

dist/chunks/cli-1.1.13-x79qava2.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.13-x79qava2.mjsView on unpkg

dist/chunks/cli-1.1.13-psmq4bkh.mjsView file

1patternName = generic_password severity = medium line = 1 matchedText = import{u...tml>

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-1.1.13-psmq4bkh.mjs

dist/chunks/cli-1.1.13-psmq4bkh.mjsView on unpkg · L1

@claudiolabs/claudin@1.1.13

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code