Loading npm security reports…

@claudiolabs/claudin@1.1.23: Suspicious npm security report | LPM Firewall

registry / @claudiolabs/claudin / 1.1.23

@claudiolabs/claudin@1.1.23

⚠ Under review

Claudin — Claude Code opened to any LLM (OpenAI, Gemini, DeepSeek, Ollama, and 200+ models)

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 27 finding(s) at 95.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 456 file(s), 8.49 MB of source, external domains: 1.1.1.1, 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, anthropic.com, api.anthropic.com, api.githubcopilot.com, api.kimi.com, api.minimax.io, api.openai.com, app.corridor.dev, beacon.claude-ai.staging.ant.dev, clau.de, claude-staging.fedstart.com, claude.ai, claude.com, claude.fedstart.com, code.claude.com, docs.anthropic.com, docs.aws.amazon.com, docs.claude.com, docs.expo.dev, duckduckgo.com, example.com, external-content.duckduckgo.com, fonts.googleapis.com, github.com, json-schema.org, json.schemastore.org, links.duckduckgo.com, mcp-proxy.anthropic.com, mcp.sentry.dev, models.github.ai, mths.be, platform.claude.com, portal.sso, portal.sso-fips, raw.githubusercontent.com, react-native.canny.io, react.dev, slack.com, sts.amazonaws.com, support.claude.com, www.googleapis.com, www.ibm.com, www.schemastore.org, www.stickermule.com, www.w3.org, your-resource-name.services.ai.azure.com

Source & flagged code

17 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/cli-1.1.23-cpdr6mcc.mjsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/cli-1.1.23-cpdr6mcc.mjsView on unpkg · L1

dist/chunks/cli-1.1.23-1a2n71wn.mjsView file

1import{Ao as y,Eo as r,YF as F,ZF as S,aG as C,gG as a}from"./cli-1.1.23-hynrf6x1.mjs";import{DZ as D,EZ as o,FZ as z,GZ as b}from"./cli-1.1.23-7081am2r.mjs";import{q$ as R,r$ as l... L2: `)&&!Q.endsWith(`

High

Child Process

Package source references child process execution.

dist/chunks/cli-1.1.23-1a2n71wn.mjsView on unpkg · L1

dist/chunks/cli-1.1.23-hynrf6x1.mjsView file

615L616: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var yj;var cC=P(()=>{J6();y4();U6(... L617: Resume this session with: ... L619: `)),zw0=!0}catch{}}function ws(Z){if(Wv!==void 0)clearTimeout(Wv),Wv=void 0;try{UA.get(process.stdout)?.drainStdin()}catch{}try{process.exit(Z)}catch(J){process.kill(process.pid,"S... L620: `)}catch{}ws(Z)}var zw0=!1,rm9,Ds=!1,Wv,Fs,am9,bw0;var Tj=P(()=>{b5();o8();dm9();E0();Aw0();lm9();im9();yw0();Gw0();nm9();x0();hJ();W0();K1();C0();gZ();A7();cm9();rm9=Z9(()=>{if(jw... L621: `),Q=J.length-1;for(;Q>=0&&$Q.blankLine.test(J[Q]);)Q--;return J.length-Q<=2?Z:J.slice(0,Q+1).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.23-hynrf6x1.mjsView on unpkg · L615

62- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L63: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var R9="Read",n$="File unchanged since last read. The content from the earlier Read tool_result in... L64: - Allows Claude to search the web and use the results to inform responses ... L78: Sources: L79: - [Source Title 1](https://example.com/1) L80: - [Source Title 2](https://example.com/2) ... L138: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L139: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var m7=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.23-hynrf6x1.mjs

dist/chunks/cli-1.1.23-eyrgaj5n.mjsView file

1import{L2 as qJ,O2 as VJ}from"./cli-1.1.23-8qrr5zea.mjs";import{$$ as jJ,$_ as W,Ifa as m,Nba as U,Pba as E,Uba as ZJ,Wba as TJ,_$ as YJ,a$ as f,gha as q,jea as $J,kfa as w,oha as ... L2: exec "${J}/node_modules/.bin/claudin" "$@"`,493))await BJ(Q,493);return!0}catch(J){return q(J),!1}}async function JQ(J,Q){try{if(!await OJ())return"install_failed";let Z=await W("n... L3: `)}catch(Q){if(n(Q))return null;throw Q}}async function l(J,Q){let Y=await MJ(J,"w");try{await Y.writeFile(Q.join(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/cli-1.1.23-eyrgaj5n.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.23-0pzcvrp1.mjsView file

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.23-0pzcvrp1.mjs spawns dist/chunks/cli-1.1.23-61q858yx.mjs; helper contains network access plus dynamic code execution. L1: import{sb as yJ,tb as xz,ub as rz,vb as cz,wb as iz,xb as kJ}from"./cli-1.1.23-gqzmsste.mjs";import{zb as Tz}from"./cli-1.1.23-4r2e2zqk.mjs";import{Jb as EJ,Kb as TJ,Lb as xJ,Mb as... L2: `).filter((K)=>K.length>0)}function VJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,_=[],M=!1,y=null,P=0,x=0,... L3: `)){if(Vz.length===0){w++;continue}let _z=sz(Vz);w+=Math.max(1,Math.ceil(_z/G))}if($.endsWith(` ... L31: `),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.23-0pzcvrp1.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cache-probe-1.1.23-t476aagd.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cache-probe-1.1.23-t476aagd.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.23-2g7503ny.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.897 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.23-2g7503ny.mjsView on unpkg

dist/chunks/openaiShim-1.1.23-0bheqhmg.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.23-0bheqhmg.mjs

dist/chunks/openaiShim-1.1.23-0bheqhmg.mjsView on unpkg · L11

Source & flagged code

17 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.23",

36 "@claudiolabs/claudin-darwin-arm64": "1.1.23",

37 "@claudiolabs/claudin-win32-x64": "1.1.23",

38 "@claudiolabs/claudin-darwin-x64": "1.1.23",

39 "@claudiolabs/claudin-linux-x64": "1.1.23",

40 "@claudiolabs/claudin-linux-arm64": "1.1.23",

41 "@claudiolabs/claudin-win32-arm64": "1.1.23",

42 "@claudiolabs/claudin-linux-arm64-musl": "1.1.23"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

52

dist/chunks/cli-1.1.23-cpdr6mcc.mjsView file

Lines 1-21javascript

1import{uc as b2,vc as sq}from"./cli-1.1.23-8tv84m75.mjs";import{Bc as rq,wc as D4,xc as i0,yc as h0,zc as K2}from"./cli-1.1.23-9bpzr9w9.mjs";import{Cc as _0,Fc

dist/chunks/cli-1.1.23-1a2n71wn.mjsView file

Lines 1-6javascript

1import{Ao as y,Eo as r,YF as F,ZF as S,aG as C,gG as a}from"./cli-1.1.23-hynrf6x1.mjs";import{DZ as D,EZ as o,FZ as z,GZ as b}from

dist/chunks/cli-1.1.23-hynrf6x1.mjsView file

615L616: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var yj;var cC=P(()=>{J6();y4();U6(... L617: Resume this session with: ... L619: `)),zw0=!0}catch{}}function ws(Z){if(Wv!==void 0)clearTimeout(Wv),Wv=void 0;try{UA.get(process.stdout)?.drainStdin()}catch{}try{process.exit(Z)}catch(J){process.kill(process.pid,"S... L620: `)}catch{}ws(Z)}var zw0=!1,rm9,Ds=!1,Wv,Fs,am9,bw0;var Tj=P(()=>{b5();o8();dm9();E0();Aw0();lm9();im9();yw0();Gw0();nm9();x0();hJ();W0();K1();C0();gZ();A7();cm9();rm9=Z9(()=>{if(jw... L621: `),Q=J.length-1;for(;Q>=0&&$Q.blankLine.test(J[Q]);)Q--;return J.length-Q<=2?Z:J.slice(0,Q+1).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.23-hynrf6x1.mjsView on unpkg · L615

62- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L63: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var R9="Read",n$="File unchanged since last read. The content from the earlier Read tool_result in... L64: - Allows Claude to search the web and use the results to inform responses ... L78: Sources: L79: - [Source Title 1](https://example.com/1) L80: - [Source Title 2](https://example.com/2) ... L138: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L139: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var m7=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.23-hynrf6x1.mjs

dist/chunks/cli-1.1.23-eyrgaj5n.mjsView file

Lines 1-16javascript

1import{L2 as qJ,O2 as VJ}from"./cli-1.1.23-8qrr5zea.mjs";import{$$ as jJ,$_ as W,Ifa as m,Nba as U,Pba as E,Uba as ZJ,Wba as TJ,_$ as YJ,a$ as f,gha as q,jea as

dist/chunks/bridgeMain-1.1.23-0pzcvrp1.mjsView file

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.23-0pzcvrp1.mjs spawns dist/chunks/cli-1.1.23-61q858yx.mjs; helper contains network access plus dynamic code execution. L1: import{sb as yJ,tb as xz,ub as rz,vb as cz,wb as iz,xb as kJ}from"./cli-1.1.23-gqzmsste.mjs";import{zb as Tz}from"./cli-1.1.23-4r2e2zqk.mjs";import{Jb as EJ,Kb as TJ,Lb as xJ,Mb as... L2: `).filter((K)=>K.length>0)}function VJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,_=[],M=!1,y=null,P=0,x=0,... L3: `)){if(Vz.length===0){w++;continue}let _z=sz(Vz);w+=Math.max(1,Math.ceil(_z/G))}if($.endsWith(` ... L31: `),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.23-0pzcvrp1.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cache-probe-1.1.23-t476aagd.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cache-probe-1.1.23-t476aagd.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.23-2g7503ny.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.897 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.23-2g7503ny.mjsView on unpkg

dist/chunks/openaiShim-1.1.23-0bheqhmg.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.23-0bheqhmg.mjs

dist/chunks/openaiShim-1.1.23-0bheqhmg.mjsView on unpkg · L11