Loading npm security reports…

@claudiolabs/claudin@1.1.25: Suspicious npm security report | LPM Firewall

registry / @claudiolabs/claudin / 1.1.25

@claudiolabs/claudin@1.1.25

⚠ Under review

Claudin — Claude Code opened to any LLM (OpenAI, Gemini, DeepSeek, Ollama, and 200+ models)

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 26 finding(s) at 95.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 459 file(s), 8.58 MB of source, external domains: 1.1.1.1, 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, anthropic.com, api.anthropic.com, api.githubcopilot.com, api.kimi.com, api.minimax.io, api.openai.com, app.corridor.dev, beacon.claude-ai.staging.ant.dev, clau.de, claude-staging.fedstart.com, claude.ai, claude.com, claude.fedstart.com, code.claude.com, docs.anthropic.com, docs.aws.amazon.com, docs.claude.com, docs.expo.dev, duckduckgo.com, example.com, external-content.duckduckgo.com, fonts.googleapis.com, github.com, json-schema.org, json.schemastore.org, links.duckduckgo.com, mcp-proxy.anthropic.com, mcp.sentry.dev, models.github.ai, mths.be, platform.claude.com, portal.sso, portal.sso-fips, raw.githubusercontent.com, react-native.canny.io, react.dev, slack.com, sts.amazonaws.com, support.claude.com, www.googleapis.com, www.ibm.com, www.schemastore.org, www.stickermule.com, www.w3.org, your-resource-name.services.ai.azure.com

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/cli-1.1.25-pgs0x971.mjsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/cli-1.1.25-pgs0x971.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.25-rmcdgp77.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.20 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.20 similarity = 0.625 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.25-rmcdgp77.mjsView on unpkg

31`),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a()},toggleQr(){M=!M,p()},updateSessionCount($,G,w){if(x===$&&N===G&&k===... L33: `);if(_.length>=sJ)_.shift();_.push(f)});if(F.stdout)HJ({input:F.stdout}).on("line",(f)=>{if(Z)Z.write(f+`

High

Child Process

Package source references child process execution.

dist/chunks/bridgeMain-1.1.25-rmcdgp77.mjsView on unpkg · L31

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.25-rmcdgp77.mjs spawns dist/chunks/cli-1.1.25-2gtabky3.mjs; helper contains network access plus dynamic code execution. L1: import{ea as yJ,fa as xz,ga as rz,ha as cz,ia as iz,ja as kJ}from"./cli-1.1.25-hjwttff4.mjs";import{la as Tz}from"./cli-1.1.25-348yqf3d.mjs";import{va as EJ,wa as TJ,xa as xJ,ya as... L2: `).filter((K)=>K.length>0)}function VJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,_=[],M=!1,y=null,P=0,x=0,... L3: `)){if(Vz.length===0){w++;continue}let _z=sz(Vz);w+=Math.max(1,Math.ceil(_z/G))}if($.endsWith(` ... L31: `),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.25-rmcdgp77.mjsView on unpkg · L1

dist/chunks/cli-1.1.25-q88hb4qg.mjsView file

616L617: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var yj;var rv=P(()=>{Y6();_4();O6(... L618: Resume this session with: ... L620: `)),Fw0=!0}catch{}}function ys(Z){if($C!==void 0)clearTimeout($C),$C=void 0;try{OA.get(process.stdout)?.drainStdin()}catch{}try{process.exit(Z)}catch(J){process.kill(process.pid,"S... L621: `)}catch{}ys(Z)}var Fw0=!1,Oc9,_s=!1,$C,Ps,Lc9,xw0;var Tj=P(()=>{v5();o8();$c9();E0();yw0();jc9();Uc9();Sw0();Uw0();Fc9();x0();gJ();W0();X1();v0();hZ();E7();Bc9();Oc9=Z9(()=>{if(Dw... L622: `),Q=J.length-1;for(;Q>=0&&BQ.blankLine.test(J[Q]);)Q--;return J.length-Q<=2?Z:J.slice(0,Q+1).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.25-q88hb4qg.mjsView on unpkg · L616

62- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L63: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var R9="Read",i$="File unchanged since last read. The content from the earlier Read tool_result in... L64: - Allows Claude to search the web and use the results to inform responses ... L78: Sources: L79: - [Source Title 1](https://example.com/1) L80: - [Source Title 2](https://example.com/2) ... L138: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L139: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var i7=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.25-q88hb4qg.mjs

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.25-nmw9agm4.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.864 shingleOverlap = 38 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.25-nmw9agm4.mjsView on unpkg

dist/chunks/openaiShim-1.1.25-frxz7cxz.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.25-frxz7cxz.mjs

dist/chunks/openaiShim-1.1.25-frxz7cxz.mjsView on unpkg · L11

Source & flagged code

16 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.25",

36 "@claudiolabs/claudin-linux-arm64": "1.1.25",

37 "@claudiolabs/claudin-darwin-arm64": "1.1.25",

38 "@claudiolabs/claudin-linux-arm64-musl": "1.1.25",

39 "@claudiolabs/claudin-linux-x64": "1.1.25",

40 "@claudiolabs/claudin-win32-x64": "1.1.25",

41 "@claudiolabs/claudin-darwin-x64": "1.1.25",

42 "@claudiolabs/claudin-win32-arm64": "1.1.25"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

52

dist/chunks/cli-1.1.25-pgs0x971.mjsView file

Lines 1-21javascript

1import{$c as sq,_c as K2}from"./cli-1.1.25-q5tqh3tz.mjs";import{ad as V2,bd as X2,cd as a0,dd as y2,fd as rq}from"./cli-1.1.25-yctc3qt8.mjs";import{gd as _0,jd as tq}

dist/chunks/bridgeMain-1.1.25-rmcdgp77.mjsView file

Lines 11-51javascript

11`);let Qz=A??U;if(Qz){m(`

12`);let Jz=$?$J(Qz):YJ(Qz),Kz=M?V.dim.italic("space to hide QR code"):V.dim.italic("space to show QR code"),r=f?V.dim.italic(" · w to toggle spawn mode"):"";m(`${V.dim(Jz)}

13`),m(`${Kz}${r}

14`)}}return{printBanner($,G){if(F=$.sessionIngressUrl,L=G,U=KJ(G,F),n(U),K)J(V.dim("Remote Control")+` v99.0.0

15`);if(K){if($.spawnMode!=="single-session")J(V.dim("Spawn mode: ")+`${$.spawnMode}

16`),J(V.dim("Max concurrent sessions: ")+`${$.maxSessions}

dist/chunks/cli-1.1.25-q88hb4qg.mjsView file

616L617: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var yj;var rv=P(()=>{Y6();_4();O6(... L618: Resume this session with: ... L620: `)),Fw0=!0}catch{}}function ys(Z){if($C!==void 0)clearTimeout($C),$C=void 0;try{OA.get(process.stdout)?.drainStdin()}catch{}try{process.exit(Z)}catch(J){process.kill(process.pid,"S... L621: `)}catch{}ys(Z)}var Fw0=!1,Oc9,_s=!1,$C,Ps,Lc9,xw0;var Tj=P(()=>{v5();o8();$c9();E0();yw0();jc9();Uc9();Sw0();Uw0();Fc9();x0();gJ();W0();X1();v0();hZ();E7();Bc9();Oc9=Z9(()=>{if(Dw... L622: `),Q=J.length-1;for(;Q>=0&&BQ.blankLine.test(J[Q]);)Q--;return J.length-Q<=2?Z:J.slice(0,Q+1).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.25-q88hb4qg.mjsView on unpkg · L616

62- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L63: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var R9="Read",i$="File unchanged since last read. The content from the earlier Read tool_result in... L64: - Allows Claude to search the web and use the results to inform responses ... L78: Sources: L79: - [Source Title 1](https://example.com/1) L80: - [Source Title 2](https://example.com/2) ... L138: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L139: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var i7=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.25-q88hb4qg.mjs

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.25-nmw9agm4.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.864 shingleOverlap = 38 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.25-nmw9agm4.mjsView on unpkg

dist/chunks/openaiShim-1.1.25-frxz7cxz.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.25-frxz7cxz.mjs

dist/chunks/openaiShim-1.1.25-frxz7cxz.mjsView on unpkg · L11