@claudiolabs/claudin@1.1.27: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@claudiolabs/claudin@1.1.27: Suspicious npm security report | LPM Firewall

Source & flagged code

17 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/openaiShim-1.1.27-p50pa80m.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/openaiShim-1.1.27-p50pa80m.mjsView on unpkg · L11

dist/chunks/bridgeMain-1.1.27-j9tfnew8.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.29 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.29 similarity = 0.633 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.27-j9tfnew8.mjsView on unpkg

31`),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a()},toggleQr(){M=!M,p()},updateSessionCount($,G,w){if(x===$&&N===G&&k===... L33: `);if(_.length>=sJ)_.shift();_.push(f)});if(F.stdout)HJ({input:F.stdout}).on("line",(f)=>{if(Z)Z.write(f+`

High

Child Process

Package source references child process execution.

dist/chunks/bridgeMain-1.1.27-j9tfnew8.mjsView on unpkg · L31

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.27-j9tfnew8.mjs spawns dist/chunks/cli-1.1.27-3eax0jv3.mjs; helper contains network access plus dynamic code execution. L1: import{ea as yJ,fa as xz,ga as rz,ha as cz,ia as iz,ja as kJ}from"./cli-1.1.27-n6vfvfw4.mjs";import{la as Tz}from"./cli-1.1.27-fary910g.mjs";import{va as EJ,wa as TJ,xa as xJ,ya as... L2: `).filter((K)=>K.length>0)}function VJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,_=[],M=!1,y=null,P=0,x=0,... L3: `)){if(Vz.length===0){w++;continue}let _z=sz(Vz);w+=Math.max(1,Math.ceil(_z/G))}if($.endsWith(` ... L31: `),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.27-j9tfnew8.mjsView on unpkg · L1

dist/chunks/cli-1.1.27-w8pwj9ef.mjsView file

616L617: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var WU;var ay=P(()=>{V7();r4();A7(... L618: Resume this session with: ... L620: `)),aN0=!0}catch{}}function Qe(J){if(LT!==void 0)clearTimeout(LT),LT=void 0;try{XM.get(process.stdout)?.drainStdin()}catch{}try{process.exit(J)}catch(Z){process.kill(process.pid,"S... L621: `)}catch{}Qe(J)}var aN0=!1,Da9,Ye=!1,LT,et,Na9,FA0;var jU=P(()=>{mY();t8();Fa9();E0();WA0();Oa9();La9();jA0();oN0();wa9();f0();nZ();W0();w1();v0();p6();SJ();Ua9();Da9=Z9(()=>{if(JA... L622: `),Q=Z.length-1;for(;Q>=0&&NQ.blankLine.test(Z[Q]);)Q--;return Z.length-Q<=2?J:Z.slice(0,Q+1).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.27-w8pwj9ef.mjsView on unpkg · L616

62- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L63: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var P9="Read",Ej="File unchanged since last read. The content from the earlier Read tool_result in... L64: - Allows Claude to search the web and use the results to inform responses ... L78: Sources: L79: - [Source Title 1](https://example.com/1) L80: - [Source Title 2](https://example.com/2) ... L138: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L139: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var JZ=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.27-w8pwj9ef.mjs

dist/chunks/watchLoop-1.1.27-1vydfkzw.mjsView file

1import{a as A,g as j}from"./cli-1.1.27-y6pe4jk6.mjs";import{Sha as $,_ha as C}from"./cli-1.1.27-48ezce33.mjs";import"./cli-1.1.27-fw9r8cwg.mjs";import"./cli-1.1.27-eag2dgb4.mjs";im... L2: ${X}`)}`;Z.push({id:G,title:W||U(X),body:X||W})}return Z}function N(q){return typeof q==="object"&&q!==null&&!Array.isArray(q)}function J(q){return typeof q==="string"&&q.trim()?q....

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/watchLoop-1.1.27-1vydfkzw.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.27-r2qyxh4t.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.27-r2qyxh4t.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.27-p99q7a22.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.800 shingleOverlap = 32 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.27-p99q7a22.mjsView on unpkg

dist/chunks/cli-1.1.27-d4w9gqgs.mjsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-1.1.27-d4w9gqgs.mjs

dist/chunks/cli-1.1.27-d4w9gqgs.mjsView on unpkg · L1

Source & flagged code

17 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.27",

36 "@claudiolabs/claudin-linux-arm64": "1.1.27",

37 "@claudiolabs/claudin-darwin-arm64": "1.1.27",

38 "@claudiolabs/claudin-linux-arm64-musl": "1.1.27",

39 "@claudiolabs/claudin-linux-x64": "1.1.27",

40 "@claudiolabs/claudin-win32-x64": "1.1.27",

41 "@claudiolabs/claudin-darwin-x64": "1.1.27",

42 "@claudiolabs/claudin-win32-arm64": "1.1.27"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

52

dist/chunks/openaiShim-1.1.27-p50pa80m.mjsView file

Lines 1-15javascript

1import{$i as WZ,Zi as QZ,_i as W0}from"./cli-1.1.27-k2fyp83y.mjs";import{cj as l$,ej as J1}from"./cli-1.1.27-y935z28w.mjs";import{Er as D0,Hj as U$,Ij as tZ,Jj as

dist/chunks/bridgeMain-1.1.27-j9tfnew8.mjsView file

Lines 11-51javascript

11`);let Qz=A??U;if(Qz){m(`

12`);let Jz=$?$J(Qz):YJ(Qz),Kz=M?V.dim.italic("space to hide QR code"):V.dim.italic("space to show QR code"),r=f?V.dim.italic(" · w to toggle spawn mode"):"";m(`${V.dim(Jz)}

13`),m(`${Kz}${r}

14`)}}return{printBanner($,G){if(F=$.sessionIngressUrl,L=G,U=KJ(G,F),n(U),K)J(V.dim("Remote Control")+` v99.0.0

15`);if(K){if($.spawnMode!=="single-session")J(V.dim("Spawn mode: ")+`${$.spawnMode}

16`),J(V.dim("Max concurrent sessions: ")+`${$.maxSessions}

dist/chunks/cli-1.1.27-w8pwj9ef.mjsView file

616L617: REMEMBER: You can ONLY explore and plan. You CANNOT and MUST NOT write, edit, or modify any files. You do NOT have access to file editing tools.`}var WU;var ay=P(()=>{V7();r4();A7(... L618: Resume this session with: ... L620: `)),aN0=!0}catch{}}function Qe(J){if(LT!==void 0)clearTimeout(LT),LT=void 0;try{XM.get(process.stdout)?.drainStdin()}catch{}try{process.exit(J)}catch(Z){process.kill(process.pid,"S... L621: `)}catch{}Qe(J)}var aN0=!1,Da9,Ye=!1,LT,et,Na9,FA0;var jU=P(()=>{mY();t8();Fa9();E0();WA0();Oa9();La9();jA0();oN0();wa9();f0();nZ();W0();w1();v0();p6();SJ();Ua9();Da9=Z9(()=>{if(JA... L622: `),Q=Z.length-1;for(;Q>=0&&NQ.blankLine.test(Z[Q]);)Q--;return Z.length-Q<=2?J:Z.slice(0,Q+1).join(`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.27-w8pwj9ef.mjsView on unpkg · L616

62- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L63: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var P9="Read",Ej="File unchanged since last read. The content from the earlier Read tool_result in... L64: - Allows Claude to search the web and use the results to inform responses ... L78: Sources: L79: - [Source Title 1](https://example.com/1) L80: - [Source Title 2](https://example.com/2) ... L138: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L139: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var JZ=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.27-w8pwj9ef.mjs

dist/chunks/watchLoop-1.1.27-1vydfkzw.mjsView file

Lines 1-14javascript

1import{a as A,g as j}from"./cli-1.1.27-y6pe4jk6.mjs";import{Sha as $,_ha as C}from"./cli-1.1.27-48ezce33.mjs";import"./cli-1.1.27-fw9r8cwg.mjs";import"./cli-1.1.27-eag2dgb4.mjs";import"./cli-1.1.27-n3fg97y6.mjs";

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.27-r2qyxh4t.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.27-r2qyxh4t.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.27-p99q7a22.mjsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/REPL-DPOsR0Mc.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 0.800 shingleOverlap = 32 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.27-p99q7a22.mjsView on unpkg

dist/chunks/cli-1.1.27-d4w9gqgs.mjsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-1.1.27-d4w9gqgs.mjs

dist/chunks/cli-1.1.27-d4w9gqgs.mjsView on unpkg · L1