@claudiolabs/claudin@1.1.20: Clean npm security report (Allow)

Loading npm security reports…

@claudiolabs/claudin@1.1.20: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

18 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.20",

36 "@claudiolabs/claudin-darwin-arm64": "1.1.20",

37 "@claudiolabs/claudin-win32-x64": "1.1.20",

38 "@claudiolabs/claudin-darwin-x64": "1.1.20",

39 "@claudiolabs/claudin-linux-x64": "1.1.20",

40 "@claudiolabs/claudin-linux-arm64": "1.1.20",

41 "@claudiolabs/claudin-win32-arm64": "1.1.20",

42 "@claudiolabs/claudin-linux-arm64-musl": "1.1.20"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/cli-1.1.20-y4b0v8se.mjsView file

Lines 1-21javascript

1import{uc as y2,vc as iq}from"./cli-1.1.20-2c8v6etd.mjs";import{Bc as aq,wc as h4,xc as i0,yc as h0,zc as X2}from"./cli-1.1.20-ezsprsc5.mjs";import{Cc as _0,Fc

dist/chunks/setup-1.1.20-rxx0xk5h.mjsView file

Lines 1-13javascript

1import{J as W$}from"./cli-1.1.20-d3ep1y0e.mjs";import"./cli-1.1.20-nr5scd4y.mjs";import{hf as y$,if as X$}from"./cli-1.1.20-wszdp4dg.mjs";import{kg as d,lg as y,mg as h2,ng

dist/chunks/cli-1.1.20-sx7811qs.mjsView file

614L615: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var Uj;var UC=P(()=>{J6();A4();j6(... L616: Resume this session with: ... L618: `)),GL0=!0}catch{}}function fo(Z){if(SC!==void 0)clearTimeout(SC),SC=void 0;try{eN.get(process.stdout)?.drainStdin()}catch{}try{process.exit(Z)}catch(J){process.kill(process.pid,"S... L619: `)}catch{}fo(Z)}var GL0=!1,zu9,xo=!1,SC,vo,Hu9,_L0;var Dj=P(()=>{N5();a8();qu9();E0();NL0();Vu9();Wu9();yL0();WL0();Gu9();x0();xJ();G0();tY();C0();gZ();D7();Ku9();zu9=e0(()=>{if($L... L620: `),Q=J.length-1;for(;Q>=0&&zQ.blankLine.test(J[Q]);)Q--;return J.length-Q<=2?Z:J.slice(0,Q+1).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.20-sx7811qs.mjsView on unpkg · L614

61- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L62: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var R9="Read",S$="File unchanged since last read. The content from the earlier Read tool_result in... L63: - Allows Claude to search the web and use the results to inform responses ... L77: Sources: L78: - [Source Title 1](https://example.com/1) L79: - [Source Title 2](https://example.com/2) ... L137: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L138: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var g7=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.20-sx7811qs.mjs

dist/chunks/hookChains-1.1.20-9xe50nmq.mjsView file

Lines 1-4javascript

dist/chunks/cli-1.1.20-edmcts0d.mjsView file

Lines 1-16javascript

1import{C2 as VJ,z2 as qJ}from"./cli-1.1.20-c2g9cejz.mjs";import{Bba as U,Dba as E,Iba as ZJ,Kba as TJ,O$ as YJ,P$ as jJ,P_ as W,Q_ as f,Wga as

dist/chunks/cli-1.1.20-rvn2axad.mjsView file

1import{g9 as P5,i9 as R7}from"./cli-1.1.20-dhn7hn4q.mjs";import{k9 as A,l9 as r8}from"./cli-1.1.20-tbtnrzgn.mjs";import{C9 as a2,E9 as D7}from"./cli-1.1.20-83vhyp8j.mjs";import{B_ ... L2: `;await H0("security",["-i"],{input:X,reject:!1}),x("",{}),$=!0}catch(Q){k(Q),x("",{error:g(Q)}),x("",{})}else x("",{});let J=V5(Z);S((Q)=>{let Y=Q.customApiKeyResponses?.approved?...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/cli-1.1.20-rvn2axad.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.16 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.16 similarity = 0.733 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView on unpkg

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.20-6dks41qc.mjs spawns dist/chunks/cli-1.1.20-rvn2axad.mjs; helper contains network access plus dynamic code execution. L1: import{sb as yJ,tb as xz,ub as rz,vb as cz,wb as iz,xb as kJ}from"./cli-1.1.20-wxxphhy4.mjs";import{zb as Tz}from"./cli-1.1.20-v6kdm8qp.mjs";import{Jb as EJ,Kb as TJ,Lb as xJ,Mb as... L2: `).filter((K)=>K.length>0)}function VJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,_=[],M=!1,y=null,P=0,x=0,... L3: `)){if(Vz.length===0){w++;continue}let _z=sz(Vz);w+=Math.max(1,Math.ceil(_z/G))}if($.endsWith(` ... L31: `),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView on unpkg · L1

dist/chunks/defaultActionDeps-1.1.20-hwtzy20f.mjsView file

1import"./cli-1.1.20-emjnkdmv.mjs";import{C as a,E as PG,F as BG,G as IZ,H as BZ}from"./cli-1.1.20-gd4g9gr0.mjs";import"./cli-1.1.20-wrat5rtg.mjs";import"./cli-1.1.20-nr5scd4y.mjs";... L2: `)),process.exit(1);if(pI()==="windows")process.stderr.write(Q.red(`Error: --tmux is not supported on Windows ... L26: 1. **Code review** — Invoke the \`${jB}\` tool with \`skill: "code-review"\` and \`args: "medium"\` to get a correctness-bug report on your changes, then fix every reported bug bef... L27: 2. **Run unit tests** — Run the project's test suite (check for package.json scripts, Makefile targets, or common commands like \`npm test\`, \`bun test\`, \`pytest\`, \`go test\`)... L28: 3. **Test end-to-end** — Follow the e2e test recipe from the coordinator's prompt (below). If the recipe says t

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/chunks/defaultActionDeps-1.1.20-hwtzy20f.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.20-m90d7k90.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.864 shingleOverlap = 38 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.20-m90d7k90.mjsView on unpkg

dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjsView file

11patternName = generic_password severity = medium line = 11 matchedText = [Content...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjs

dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjsView on unpkg · L11

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/cli-1.1.20-y4b0v8se.mjsView file

1patternName = generic_password severity = medium line = 1 matchedText = import{u...tml>

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/cli-1.1.20-y4b0v8se.mjsView on unpkg · L1

dist/chunks/setup-1.1.20-rxx0xk5h.mjsView file

1import{J as W$}from"./cli-1.1.20-d3ep1y0e.mjs";import"./cli-1.1.20-nr5scd4y.mjs";import{hf as y$,if as X$}from"./cli-1.1.20-wszdp4dg.mjs";import{kg as d,lg as y,mg as h2,ng as l,og... L2: `),V=[];for(let K of Y.dirCounts){let G=l(Q,K.path,z);if(G===0)continue;if(!r(K.claimed,G))continue;V.push({lineNumber:K.lineNumber,path:K.path,actual:G});let j=K.lineNumber-1,H=q[...

High

Child Process

Package source references child process execution.

dist/chunks/setup-1.1.20-rxx0xk5h.mjsView on unpkg · L1

dist/chunks/cli-1.1.20-sx7811qs.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.20-sx7811qs.mjsView on unpkg · L614

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.20-sx7811qs.mjs

dist/chunks/hookChains-1.1.20-9xe50nmq.mjsView file

1import{CF as Kj,Cw as kj,aB as M,bB as Cj,mw as t,wF as jj}from"./cli-1.1.20-sx7811qs.mjs";import"./cli-1.1.20-8s1w9hdq.mjs";import"./cli-1.1.20-vf1ea98p.mjs";import"./cli-1.1.20-e... L2: `)}function ej(j,q,G){let A=_(G.payload),F=U(A),J={EVENT_NAME:G.eventName,OUTCOME:G.outcome,RULE_ID:q.id,PAYLOAD_JSON:F,ERROR:Y(A,["error","reason"])??"",TASK_SUBJECT:Y(A,["task_su... L3: `);return{summary:O,body:P}}async function tj(j){let{action:q,rule:G,event:A,runtime:F}=j;if(F.signal?.aborted)return{status:"skipped",reason:"aborted"};if(!F.onSpawnFallbackAgent)...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/hookChains-1.1.20-9xe50nmq.mjsView on unpkg · L1

dist/chunks/cli-1.1.20-edmcts0d.mjsView file

1import{C2 as VJ,z2 as qJ}from"./cli-1.1.20-c2g9cejz.mjs";import{Bba as U,Dba as E,Iba as ZJ,Kba as TJ,O$ as YJ,P$ as jJ,P_ as W,Q_ as f,Wga as q,Zda as $J,_ea as w,cha as u,kea as ... L2: exec "${J}/node_modules/.bin/claudin" "$@"`,493))await BJ(Q,493);return!0}catch(J){return q(J),!1}}async function JQ(J,Q){try{if(!await OJ())return"install_failed";let Z=await W("n... L3: `)}catch(Q){if(n(Q))return null;throw Q}}async function l(J,Q){let Y=await MJ(J,"w");try{await Y.writeFile(Q.join(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/cli-1.1.20-edmcts0d.mjsView on unpkg · L1

dist/chunks/cli-1.1.20-rvn2axad.mjsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/cli-1.1.20-rvn2axad.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView on unpkg · L1

dist/chunks/defaultActionDeps-1.1.20-hwtzy20f.mjsView file

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/chunks/defaultActionDeps-1.1.20-hwtzy20f.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.20-m90d7k90.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.20-m90d7k90.mjsView on unpkg

dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjsView file

11patternName = generic_password severity = medium line = 11 matchedText = [Content...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjs

dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjsView on unpkg · L11

Source & flagged code

18 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.20",

36 "@claudiolabs/claudin-darwin-arm64": "1.1.20",

37 "@claudiolabs/claudin-win32-x64": "1.1.20",

38 "@claudiolabs/claudin-darwin-x64": "1.1.20",

39 "@claudiolabs/claudin-linux-x64": "1.1.20",

40 "@claudiolabs/claudin-linux-arm64": "1.1.20",

41 "@claudiolabs/claudin-win32-arm64": "1.1.20",

42 "@claudiolabs/claudin-linux-arm64-musl": "1.1.20"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/cli-1.1.20-y4b0v8se.mjsView file

Lines 1-21javascript

1import{uc as y2,vc as iq}from"./cli-1.1.20-2c8v6etd.mjs";import{Bc as aq,wc as h4,xc as i0,yc as h0,zc as X2}from"./cli-1.1.20-ezsprsc5.mjs";import{Cc as _0,Fc

dist/chunks/setup-1.1.20-rxx0xk5h.mjsView file

Lines 1-13javascript

1import{J as W$}from"./cli-1.1.20-d3ep1y0e.mjs";import"./cli-1.1.20-nr5scd4y.mjs";import{hf as y$,if as X$}from"./cli-1.1.20-wszdp4dg.mjs";import{kg as d,lg as y,mg as h2,ng

dist/chunks/cli-1.1.20-sx7811qs.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.20-sx7811qs.mjsView on unpkg · L614

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.20-sx7811qs.mjs

dist/chunks/hookChains-1.1.20-9xe50nmq.mjsView file

Lines 1-4javascript

dist/chunks/cli-1.1.20-edmcts0d.mjsView file

Lines 1-16javascript

1import{C2 as VJ,z2 as qJ}from"./cli-1.1.20-c2g9cejz.mjs";import{Bba as U,Dba as E,Iba as ZJ,Kba as TJ,O$ as YJ,P$ as jJ,P_ as W,Q_ as f,Wga as

dist/chunks/cli-1.1.20-rvn2axad.mjsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/cli-1.1.20-rvn2axad.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.20-6dks41qc.mjsView on unpkg · L1

dist/chunks/defaultActionDeps-1.1.20-hwtzy20f.mjsView file

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/chunks/defaultActionDeps-1.1.20-hwtzy20f.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.20-m90d7k90.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.20-m90d7k90.mjsView on unpkg

dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjsView file

11patternName = generic_password severity = medium line = 11 matchedText = [Content...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjs

dist/chunks/openaiShim-1.1.20-1jxfjf9e.mjsView on unpkg · L11

@claudiolabs/claudin@1.1.20

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code