@claudiolabs/claudin@1.1.29: Suspicious npm security report

Loading npm security reports…

@claudiolabs/claudin@1.1.29: Suspicious npm security report | LPM Firewall

Source & flagged code

18 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.29",

36 "@claudiolabs/claudin-linux-arm64": "1.1.29",

37 "@claudiolabs/claudin-darwin-arm64": "1.1.29",

38 "@claudiolabs/claudin-linux-arm64-musl": "1.1.29",

39 "@claudiolabs/claudin-linux-x64": "1.1.29",

40 "@claudiolabs/claudin-win32-x64": "1.1.29",

41 "@claudiolabs/claudin-darwin-x64": "1.1.29",

42 "@claudiolabs/claudin-win32-arm64": "1.1.29"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/openaiShim-1.1.29-3v0weah8.mjsView file

Lines 1-15javascript

1import{$i as WZ,Zi as QZ,_i as D0}from"./cli-1.1.29-2tyhgmxe.mjs";import{cj as l$,ej as Y1}from"./cli-1.1.29-0rnfn0gy.mjs";import{Aq as c$,Ar as K1,Bq as i$,Br as

dist/chunks/cli-1.1.29-v507w0kc.mjsView file

Lines 1-26javascript

1class H extends Error{constructor(z,J,Q){super(Q);Error.captureStackTrace(this,this.constructor),this

dist/chunks/cli-1.1.29-m7rehwdd.mjsView file

Lines 1-21javascript

1import{Ama as ql,pma as Ku}from"./cli-1.1.29-79tgwbnn.mjs";import{Vta as On,Wta as O,Xta as Gu}from"./cli-1.1.29-4xqgqvwm.mjs";function Lu(n){let r

dist/chunks/cli-1.1.29-am1n3767.mjsView file

887L888: ONLY return the prefix. Do not return any other text, markdown markers, or other content or formatting.`,uE0,iM,pE0,E78;var sY=P(()=>{EE0();$00();QJ();pU=new Set(["0","1","2"]);uE0... L889: `)});let z=!1;W.on("close",(H)=>{if(z)return;if(z=!0,H===0||H===1)q(G);else V(Error(`rg --files exited ${H}`))}),W.on("error",(H)=>{if(z)return;z=!0,V(A00(H)&&H.code==="ENOENT"?R00... ... L898: `)&&kS.test(K.target))return{ok:!1,reason:"Newline followed by # inside a redirect target can hide arguments from path validation"};if(Y==="jq"){for(let K of Q)if(/\bsystem\s*\(/.t... L899: `]);xJ8=/[ \t\n*?[]/,kJ8=/^-[ioe]$/,fJ8=/^-[ioe]./,hJ8=/^--(input|output|error)=/,gJ8=new Set(["HOME","PWD","OLDPWD","USER","LOGNAME","SHELL","PATH","HOSTNAME","UID","EUID","PPID",... L900: `);return[`<cwd>${Z}</c

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.29-am1n3767.mjsView on unpkg · L887

62- Otherwise, emit the Reads as parallel tool_use blocks in the same assistant message. Same-turn parallel Reads are first-class. L63: A serial loop of Read → short comment → Read → short comment is the wrong shape.`}var E9="Read",bj="File unchanged since last read. The content from the earlier Read tool_result in... L64: - Allows Claude to search the web and use the results to inform responses ... L78: Sources: L79: - [Source Title 1](https://example.com/1) L80: - [Source Title 2](https://example.com/2) ... L138: - Use this tool when you need to find files by name patterns, including what \`find\` is reached for: depth, directories, exclusions L139: - When you are doing an open ended search that may require multiple rounds of globbing and grepping, use the Agent tool instead`;var ZZ=(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.29-7vrxybxh.mjsView file

Lines 1-16javascript

1import{$2 as qJ,c3 as VJ}from"./cli-1.1.29-1dqp4d2w.mjs";import{Cga as m,Hca as U,Jca as E,Oca as ZJ,Qca as TJ,Saa as YJ,T$ as W,Taa as jJ,U$ as f,aia as

dist/chunks/cli-1.1.29-8k2xw0ns.mjsView file

1import{f_ as P5,h_ as R7}from"./cli-1.1.29-57e9kkv7.mjs";import{j_ as A,k_ as e8}from"./cli-1.1.29-5gydp5n7.mjs";import{u_ as a2,w_ as D7}from"./cli-1.1.29-71e5px3b.mjs";import{A$ ... L2: `;await H0("security",["-i"],{input:X,reject:!1}),x("",{}),$=!0}catch(Q){k(Q),x("",{error:g(Q)}),x("",{})}else x("",{});let J=V5(Z);S((Q)=>{let Y=Q.customApiKeyResponses?.approved?...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/cli-1.1.29-8k2xw0ns.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.28 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.28 similarity = 0.617 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView on unpkg

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjs spawns dist/chunks/cli-1.1.29-20bcsb6f.mjs; helper contains network access plus dynamic code execution. L1: import{ea as yJ,fa as xz,ga as rz,ha as cz,ia as iz,ja as kJ}from"./cli-1.1.29-xfhxkzzh.mjs";import{la as Tz}from"./cli-1.1.29-ajwqka67.mjs";import{va as EJ,wa as TJ,xa as xJ,ya as... L2: `).filter((K)=>K.length>0)}function VJ(z){let J=z.write??(($)=>process.stdout.write($)),K=z.verbose,Y=0,O="idle",Z="Ready",R="",B="",U="",F="",L="",A=null,_=[],M=!1,y=null,P=0,x=0,... L3: `)){if(Vz.length===0){w++;continue}let _z=sz(Vz);w+=Math.max(1,Math.ceil(_z/G))}if($.endsWith(` ... L31: `),$)m(`${V.red($)} L32: `)},updateSessionStatus($,G,w,Vz){if(w.type==="tool_start")y=w.summary,P=Date.now();p()},clearStatus(){t(),a

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.29-7peev9wq.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.29-7peev9wq.mjsView on unpkg

dist/chunks/cli-1.1.29-f103mqc1.mjsView file

•matchType = token_shingles matchedPackage = @mdevs/mai-cli@1.0.20 matchedPath = dist/chunks/loadAgentsDir-UyQxvIqQ.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.20 similarity = 0.789 shingleOverlap = 30 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.29-f103mqc1.mjsView on unpkg

dist/chunks/cli-1.1.29-scf5dmr2.mjsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-1.1.29-scf5dmr2.mjs

dist/chunks/cli-1.1.29-scf5dmr2.mjsView on unpkg · L1

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/openaiShim-1.1.29-3v0weah8.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/openaiShim-1.1.29-3v0weah8.mjsView on unpkg · L11

dist/chunks/cli-1.1.29-v507w0kc.mjsView file

6- too many long flags`);throw Error(`${_} L7: - unrecognised flag format`)}if(J===void 0&&Q===void 0)throw Error(`option creation failed due to no flags found in '${z}'.`);return{shortFlag:J,longFlag:Q}}import{EventEmitter as ... L8: `)}displayWidth(z){return k(z).length}styleTitle(z){return z}styleUsage(z){return z.split(" ").map((J)=>{if(J==="[options]")return this.styleOptionText(J);if(J==="[command]")return...

High

Child Process

Package source references child process execution.

dist/chunks/cli-1.1.29-v507w0kc.mjsView on unpkg · L6

dist/chunks/cli-1.1.29-m7rehwdd.mjsView file

1import{Ama as ql,pma as Ku}from"./cli-1.1.29-79tgwbnn.mjs";import{Vta as On,Wta as O,Xta as Gu}from"./cli-1.1.29-4xqgqvwm.mjs";function Lu(n){let r=0;for(let $=0;$<n.length;$++)r=(... L2: `)}var P1,ng,ig,ou,Zu=(n,r)=>{n.name="$ZodError",ng.value=n._zod,Object.defineProperty(n,"_zod",ng),ig.value=r,Object.defineProperty(n,"issues",ig),ng.value=void 0,ig.value=void 0,...

High

Eval

Package source references dynamic code evaluation.

dist/chunks/cli-1.1.29-m7rehwdd.mjsView on unpkg · L1

dist/chunks/cli-1.1.29-am1n3767.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.29-am1n3767.mjsView on unpkg · L887

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.29-7vrxybxh.mjsView file

1import{$2 as qJ,c3 as VJ}from"./cli-1.1.29-1dqp4d2w.mjs";import{Cga as m,Hca as U,Jca as E,Oca as ZJ,Qca as TJ,Saa as YJ,T$ as W,Taa as jJ,U$ as f,aia as q,dfa as $J,ega as w,iia a... L2: exec "${J}/node_modules/.bin/claudin" "$@"`,493))await BJ(Q,493);return!0}catch(J){return q(J),!1}}async function JQ(J,Q){try{if(!await OJ())return"install_failed";let Z=await W("n... L3: `)}catch(Q){if(n(Q))return null;throw Q}}async function l(J,Q){let Y=await MJ(J,"w");try{await Y.writeFile(Q.join(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/cli-1.1.29-7vrxybxh.mjsView on unpkg · L1

dist/chunks/cli-1.1.29-8k2xw0ns.mjsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/cli-1.1.29-8k2xw0ns.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.29-7peev9wq.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.29-7peev9wq.mjsView on unpkg

dist/chunks/cli-1.1.29-f103mqc1.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.29-f103mqc1.mjsView on unpkg

dist/chunks/cli-1.1.29-scf5dmr2.mjsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-1.1.29-scf5dmr2.mjs

dist/chunks/cli-1.1.29-scf5dmr2.mjsView on unpkg · L1

Source & flagged code

18 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.29",

36 "@claudiolabs/claudin-linux-arm64": "1.1.29",

37 "@claudiolabs/claudin-darwin-arm64": "1.1.29",

38 "@claudiolabs/claudin-linux-arm64-musl": "1.1.29",

39 "@claudiolabs/claudin-linux-x64": "1.1.29",

40 "@claudiolabs/claudin-win32-x64": "1.1.29",

41 "@claudiolabs/claudin-darwin-x64": "1.1.29",

42 "@claudiolabs/claudin-win32-arm64": "1.1.29"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/openaiShim-1.1.29-3v0weah8.mjsView file

Lines 1-15javascript

1import{$i as WZ,Zi as QZ,_i as D0}from"./cli-1.1.29-2tyhgmxe.mjs";import{cj as l$,ej as Y1}from"./cli-1.1.29-0rnfn0gy.mjs";import{Aq as c$,Ar as K1,Bq as i$,Br as

dist/chunks/cli-1.1.29-v507w0kc.mjsView file

Lines 1-26javascript

1class H extends Error{constructor(z,J,Q){super(Q);Error.captureStackTrace(this,this.constructor),this

dist/chunks/cli-1.1.29-m7rehwdd.mjsView file

Lines 1-21javascript

1import{Ama as ql,pma as Ku}from"./cli-1.1.29-79tgwbnn.mjs";import{Vta as On,Wta as O,Xta as Gu}from"./cli-1.1.29-4xqgqvwm.mjs";function Lu(n){let r

dist/chunks/cli-1.1.29-am1n3767.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.29-am1n3767.mjsView on unpkg · L887

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.29-7vrxybxh.mjsView file

Lines 1-16javascript

1import{$2 as qJ,c3 as VJ}from"./cli-1.1.29-1dqp4d2w.mjs";import{Cga as m,Hca as U,Jca as E,Oca as ZJ,Qca as TJ,Saa as YJ,T$ as W,Taa as jJ,U$ as f,aia as

dist/chunks/cli-1.1.29-8k2xw0ns.mjsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/cli-1.1.29-8k2xw0ns.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.29-sk2e5ssh.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.29-7peev9wq.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.29-7peev9wq.mjsView on unpkg

dist/chunks/cli-1.1.29-f103mqc1.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.29-f103mqc1.mjsView on unpkg

dist/chunks/cli-1.1.29-scf5dmr2.mjsView file

1patternName = generic_password severity = medium line = 1

Medium

Secret Pattern

Hardcoded password in dist/chunks/cli-1.1.29-scf5dmr2.mjs

dist/chunks/cli-1.1.29-scf5dmr2.mjsView on unpkg · L1

@claudiolabs/claudin@1.1.29

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code