@claudiolabs/claudin@1.1.24: Suspicious npm security report

Loading npm security reports…

@claudiolabs/claudin@1.1.24: Suspicious npm security report | LPM Firewall

Source & flagged code

25 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.24",

36 "@claudiolabs/claudin-linux-arm64": "1.1.24",

37 "@claudiolabs/claudin-darwin-arm64": "1.1.24",

38 "@claudiolabs/claudin-linux-arm64-musl": "1.1.24",

39 "@claudiolabs/claudin-linux-x64": "1.1.24",

40 "@claudiolabs/claudin-win32-x64": "1.1.24",

41 "@claudiolabs/claudin-darwin-x64": "1.1.24",

42 "@claudiolabs/claudin-win32-arm64": "1.1.24"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/cli-1.1.24-8n6b217h.mjsView file

Lines 1-21javascript

1import{$c as sq,_c as K2}from"./cli-1.1.24-93bhcjrs.mjs";import{ad as V2,bd as X2,cd as a0,dd as y2,fd as rq}from"./cli-1.1.24-228jgyfg.mjs";import{gd as _0,jd as tq}

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView file

615L616: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var yj;var cC=P(()=>{Y6();y4();F6(... L617: Resume this session with: ... L619: `)),zw0=!0}catch{}}function Ds(Z){if(Wv!==void 0)clearTimeout(Wv),Wv=void 0;try{FA.get(process.stdout)?.drainStdin()}catch{}try{process.exit(Z)}catch(J){process.kill(process.pid,"S... L620: `)}catch{}Ds(Z)}var zw0=!1,Jc9,Ns=!1,Wv,Os,Qc9,bw0;var Tj=P(()=>{b5();o8();sm9();E0();Aw0();tm9();em9();yw0();Gw0();Zc9();x0();hJ();W0();K1();C0();gZ();A7();om9();Jc9=J9(()=>{if(jw... L621: `),Q=J.length-1;for(;Q>=0&&$Q.blankLine.test(J[Q]);)Q--;return J.length-Q<=2?Z:J.slice(0,Q+1).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L615

62- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L63: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var R9="Read",n$="File unchanged since last read. The content from the earlier Read tool_result in... L64: - Allows Claude to search the web and use the results to inform responses ... L78: Sources: L79: - [Source Title 1](https://example.com/1) L80: - [Source Title 2](https://example.com/2) ... L138: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L139: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var m7=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.24-2qkkzsk3.mjs

dist/chunks/bridgeMain-1.1.24-5vh38zjk.mjsView file

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.24-5vh38zjk.mjs spawns dist/chunks/cli-1.1.24-2qkkzsk3.mjs; helper contains network access plus dynamic code execution. L1: import{ea as yJ,fa as xz,ga as rz,ha as cz,ia as iz,ja as kJ}from"./cli-1.1.24-8xvf355a.mjs";import{la as Tz}from"./cli-1.1.24-pqkmk87x.mjs";import{va as EJ,wa as TJ,xa as xJ,ya as... L2: `).filter((K)=>K.length>0)}function VJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,_=[],M=!1,y=null,P=0,x=0,... L3: `)){if(Vz.length===0){w++;continue}let _z=sz(Vz);w+=Math.max(1,Math.ceil(_z/G))}if($.endsWith(` ... L31: `),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.24-5vh38zjk.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cache-probe-1.1.24-qxe2hv8y.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cache-probe-1.1.24-qxe2hv8y.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.24-pe23qamd.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-mvjefec1.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-pe23qamd.mjsView on unpkg

dist/chunks/cli-1.1.24-ymqwnn04.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-vypd5zf6.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-ymqwnn04.mjsView on unpkg

dist/chunks/cli-1.1.24-707k0kc7.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-55ayan24.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 32 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-707k0kc7.mjsView on unpkg

dist/chunks/cli-1.1.24-dw6eynz7.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-tgtv1jp3.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-dw6eynz7.mjsView on unpkg

dist/chunks/cli-1.1.24-vf59rwy3.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-nv2mgz6h.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-vf59rwy3.mjsView on unpkg

dist/chunks/protocolHandler-1.1.24-n1vv96tn.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/protocolHandler-1.1.26-qfw93skn.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/protocolHandler-1.1.24-n1vv96tn.mjsView on unpkg

dist/chunks/cli-1.1.24-d371v1bp.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-thxyzhdj.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-d371v1bp.mjsView on unpkg

dist/chunks/cli-1.1.24-pgkt8y4z.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-01erqdx7.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-pgkt8y4z.mjsView on unpkg

dist/chunks/cli-1.1.24-6ptbgma9.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-32vewh62.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-6ptbgma9.mjsView on unpkg

dist/chunks/cli-1.1.24-zc49jxpp.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-hxty6b5t.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-zc49jxpp.mjsView on unpkg

dist/chunks/index-1.1.24-ry33qapt.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/index-1.1.26-syyhrh9b.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/index-1.1.24-ry33qapt.mjsView on unpkg

dist/chunks/openaiShim-1.1.24-29jaq53v.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.24-29jaq53v.mjs

dist/chunks/openaiShim-1.1.24-29jaq53v.mjsView on unpkg · L11

Source & flagged code

25 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/cli-1.1.24-8n6b217h.mjsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/cli-1.1.24-8n6b217h.mjsView on unpkg · L1

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L615

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L62

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L62

885L886: ONLY return the prefix. Do not return any other text, markdown markers, or other content or formatting.`,MR0,WM,RR0,$s9;var LY=P(()=>{GR0();gt();U7();qU=new Set(["0","1","2"]);MR0=... L887: `)});let z=!1;W.on("close",(H)=>{if(z)return;if(z=!0,H===0||H===1)q(G);else V(Error(`rg --files exited ${H}`))}),W.on("error",(H)=>{if(z)return;z=!0,V(rt(H)&&H.code==="ENOENT"?ot(H...

High

Child Process

Package source references child process execution.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L885

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L615

146`));return $$0(Z).some((Y)=>z$0(Y.lines.join(` L147: `)).includes(Q))}function j$0(Z){let J=$$0(Z);if(J.length===0)return"no lines";let Q=J.map(({offset:X,lines:K})=>K.length===1?`${X}`:`${X}-${X+K.length-1}`);return`${J.length===1&&... L148: ... L688: L689: > WARNING: ${gJ} is ${W}. Only part of it was loaded. Keep index entries to one line under ~200 chars; move detail into topic files.`,lineCount:Y,byteCount:X,wasLineTruncated:K,was... L690: `)}function uv(Z){if(!h0("tengu_coral_fern",!1))return[];let J=jZ($9()),Q=B7()||SA(),Y=Q?`grep -rn "<search term>" ${Z} --include="*.md"`:`${v8} with pattern="<search term>" path="... ... L885: L886: ONLY return the prefix. Do not return any other text, markdown markers, or other content or formatting.`,MR0,WM,RR0,$s9;var LY=P(()=>{GR0();gt

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L146

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-55ayan24.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 18 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L62

dist/chunks/bridgeMain-1.1.24-5vh38zjk.mjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.24-5vh38zjk.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cache-probe-1.1.24-qxe2hv8y.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cache-probe-1.1.24-qxe2hv8y.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.24-pe23qamd.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-pe23qamd.mjsView on unpkg

dist/chunks/cli-1.1.24-ymqwnn04.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-ymqwnn04.mjsView on unpkg

dist/chunks/cli-1.1.24-707k0kc7.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-707k0kc7.mjsView on unpkg

dist/chunks/cli-1.1.24-dw6eynz7.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-dw6eynz7.mjsView on unpkg

dist/chunks/cli-1.1.24-vf59rwy3.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-vf59rwy3.mjsView on unpkg

dist/chunks/protocolHandler-1.1.24-n1vv96tn.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/protocolHandler-1.1.24-n1vv96tn.mjsView on unpkg

dist/chunks/cli-1.1.24-d371v1bp.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-d371v1bp.mjsView on unpkg

dist/chunks/cli-1.1.24-pgkt8y4z.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-pgkt8y4z.mjsView on unpkg

dist/chunks/cli-1.1.24-6ptbgma9.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-6ptbgma9.mjsView on unpkg

dist/chunks/cli-1.1.24-zc49jxpp.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-zc49jxpp.mjsView on unpkg

dist/chunks/index-1.1.24-ry33qapt.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/index-1.1.24-ry33qapt.mjsView on unpkg

dist/chunks/openaiShim-1.1.24-29jaq53v.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.24-29jaq53v.mjs

dist/chunks/openaiShim-1.1.24-29jaq53v.mjsView on unpkg · L11

Source & flagged code

25 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.24",

36 "@claudiolabs/claudin-linux-arm64": "1.1.24",

37 "@claudiolabs/claudin-darwin-arm64": "1.1.24",

38 "@claudiolabs/claudin-linux-arm64-musl": "1.1.24",

39 "@claudiolabs/claudin-linux-x64": "1.1.24",

40 "@claudiolabs/claudin-win32-x64": "1.1.24",

41 "@claudiolabs/claudin-darwin-x64": "1.1.24",

42 "@claudiolabs/claudin-win32-arm64": "1.1.24"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/cli-1.1.24-8n6b217h.mjsView file

Lines 1-21javascript

1import{$c as sq,_c as K2}from"./cli-1.1.24-93bhcjrs.mjs";import{ad as V2,bd as X2,cd as a0,dd as y2,fd as rq}from"./cli-1.1.24-228jgyfg.mjs";import{gd as _0,jd as tq}

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.24-2qkkzsk3.mjsView on unpkg · L615

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.24-2qkkzsk3.mjs

dist/chunks/bridgeMain-1.1.24-5vh38zjk.mjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.24-5vh38zjk.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cache-probe-1.1.24-qxe2hv8y.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cache-probe-1.1.24-qxe2hv8y.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.24-pe23qamd.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-pe23qamd.mjsView on unpkg

dist/chunks/cli-1.1.24-ymqwnn04.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-ymqwnn04.mjsView on unpkg

dist/chunks/cli-1.1.24-707k0kc7.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-707k0kc7.mjsView on unpkg

dist/chunks/cli-1.1.24-dw6eynz7.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-dw6eynz7.mjsView on unpkg

dist/chunks/cli-1.1.24-vf59rwy3.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-vf59rwy3.mjsView on unpkg

dist/chunks/protocolHandler-1.1.24-n1vv96tn.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/protocolHandler-1.1.24-n1vv96tn.mjsView on unpkg

dist/chunks/cli-1.1.24-d371v1bp.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-d371v1bp.mjsView on unpkg

dist/chunks/cli-1.1.24-pgkt8y4z.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-pgkt8y4z.mjsView on unpkg

dist/chunks/cli-1.1.24-6ptbgma9.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-6ptbgma9.mjsView on unpkg

dist/chunks/cli-1.1.24-zc49jxpp.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.24-zc49jxpp.mjsView on unpkg

dist/chunks/index-1.1.24-ry33qapt.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/index-1.1.24-ry33qapt.mjsView on unpkg

dist/chunks/openaiShim-1.1.24-29jaq53v.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.24-29jaq53v.mjs

dist/chunks/openaiShim-1.1.24-29jaq53v.mjsView on unpkg · L11

@claudiolabs/claudin@1.1.24

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code