Loading npm security reports…

@claudiolabs/claudin@1.1.34: Unknown npm security report (Allow) | LPM Firewall

registry / @claudiolabs/claudin / 1.1.34

@claudiolabs/claudin@1.1.34

⚠ Under review

Claudin — Claude Code opened to any LLM (OpenAI, Gemini, DeepSeek, Ollama, and 200+ models)

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 29 low-signal pattern(s) were surfaced and cleared.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 418 file(s), 11.9 MB of source, external domains: 1.1.1.1, 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, anthropic.com, api.anthropic.com, api.bing.microsoft.com, api.cloudflare.com, api.deepseek.com, api.exa.ai, api.firecrawl.dev, api.github.com, api.githubcopilot.com, api.groq.com, api.kimi.com, api.linkup.so, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.openai.com, api.search.brave.com, api.tavily.com, api.together.xyz, api.x.ai, api.ydc-index.io, api.z.ai, app.corridor.dev, auth.kimi.com, auth.openai.com, auth.x.ai, aws.amazon.com, beacon.claude-ai.staging.ant.dev, bedrock-runtime.us-east-1.amazonaws.com, chatgpt.com, clau.de, claude-ai.staging.ant.dev, claude-staging.fedstart.com, claude.ai, claude.com, claude.fedstart.com, cli.github.com, code.claude.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, cognitiveservices.azure.com, docs.anthropic.com, docs.aws.amazon.com, docs.claude.com, docs.expo.dev

Source & flagged code

19 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.34",

36 "@claudiolabs/claudin-linux-arm64": "1.1.34",

37 "@claudiolabs/claudin-darwin-arm64": "1.1.34",

38 "@claudiolabs/claudin-linux-arm64-musl": "1.1.34",

39 "@claudiolabs/claudin-linux-x64": "1.1.34",

40 "@claudiolabs/claudin-win32-x64": "1.1.34",

41 "@claudiolabs/claudin-darwin-x64": "1.1.34",

42 "@claudiolabs/claudin-win32-arm64": "1.1.34"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/cli-1.1.34-v2gbtt59.mjsView file

Lines 29-51javascript

29 <h1>Codex login failed</h1>

30 <p>${X2(q)}</p>

31 <p>You can close this window and try again in Claudin.</p>

32 </body>

33</

dist/chunks/node-1.1.34-sdqnj3qm.mjsView file

Lines 1-16javascript

1import{L8 as nQ,M8 as S,N8 as F,P8 as W,Q8 as bQ,R8 as iQ,S8 as HQ}from"./cli-1.1.34-exsrnr6k.mjs";import{Vpa as N,Wpa as K,Xpa as N0,Ypa as

cli-wrapper.cjsView file

Lines 1-34javascript

1#!/usr/bin/env node

2// Fallback launcher for the @claudiolabs/claudin wrapper package.

3//

4// Normally the postinstall (install.cjs) hardlinks the native binary over

5// bin/claudin.exe, so this file is never invoked. It exists for environments

6// where postinstall doesn't run (--ignore-scripts): users can run

7// `node cli-wrapper.cjs` directly and pay the Node-process spawn overhead.

8//

9// If no native binary is available for this platform (unsupported OS/arch, or

10// --omit=optional), it falls back to the Node bundle (dist/cli.mjs) shipped in

dist/chunks/cli-1.1.34-yrk4mxjw.mjsView file

Lines 1-17javascript

1import{r6 as h2,t6 as G8}from"./cli-1.1.34-1xg52b7q.mjs";import{v6 as M,w6 as jJ}from"./cli-1.1.34-7bxexffs.mjs";import{y6 as I5,z6 as GJ}from"./cli-1.1.34-4zj4kbw4.mjs";import

dist/chunks/watchLoop-1.1.34-tnjnpc05.mjsView file

Lines 1-14javascript

dist/chunks/cli-1.1.34-zpsaqq15.mjsView file

Lines 1-18javascript

1import{Gqa as y,Jqa as b}from"./cli-1.1.34-4x915j9t.mjs";var P0=y(($w)=>{$w.HttpAuthLocation=void 0;(function($){$.HEADER

dist/chunks/index-1.1.34-mx39dxjj.mjsView file

Lines 1-31javascript

1import{Gqa as A,Jqa as v}from"./cli-1.1.34-4x915j9t.mjs";var D8=A((i)=>{var B1=i&&i.__assign||function(){

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.30 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.30 similarity = 0.358 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView on unpkg

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.34-saff9rp6.mjs spawns dist/chunks/cli-1.1.34-166q8s04.mjs; helper contains network access plus dynamic code execution. L1: import{T as NJ,U as Mz,V as PJ,W as Sz,X as uz,Y as EJ}from"./cli-1.1.34-3qpxmhy6.mjs";import{_ as Az}from"./cli-1.1.34-yqryw36t.mjs";import{Sa as oz,Ta as _z,Ua as rz,Va as iz,Xa ... L2: `).filter((X)=>X.length>0)}function zJ(z){let J=z.write??((Z)=>process.stdout.write(Z)),X=z.verbose,W=0,O="idle",K="Ready",C="",F="",D="",B="",x="",R=null,_=[],M=!1,E=null,P=0,f=0,... L3: `)){if(Wz.length===0){T++;continue}let Nz=lz(Wz);T+=Math.max(1,Math.ceil(Nz/j))}if(Z.endsWith(` ... L31: `),Z)h(`${Q.red(Z)} L32: `)},updateSessionStatus(Z,j,T,Wz){if(T.type==="tool_start")E=T.summary,P=Date.now();S()},clearStatus(){r(),t

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.34-gmaedxb1.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.34-gmaedxb1.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.34-84707tma.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-kvt0v6vq.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 18 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-84707tma.mjsView on unpkg

dist/chunks/cli-1.1.34-mhjjf878.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-vypd5zf6.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-mhjjf878.mjsView on unpkg

dist/chunks/cli-1.1.34-q83yydqv.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-55ayan24.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 32 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-q83yydqv.mjsView on unpkg

dist/chunks/cli-1.1.34-mbeaqq0q.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-01erqdx7.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-mbeaqq0q.mjsView on unpkg

dist/chunks/cli-1.1.34-166q8s04.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-hxty6b5t.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-166q8s04.mjsView on unpkg

dist/chunks/cli-1.1.34-7bxexffs.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-32vewh62.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-7bxexffs.mjsView on unpkg

dist/chunks/openaiShim-1.1.34-kj2a4r19.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.34-kj2a4r19.mjs

dist/chunks/openaiShim-1.1.34-kj2a4r19.mjsView on unpkg · L11

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/cli-1.1.34-v2gbtt59.mjsView file

49patternName = generic_password severity = medium line = 49

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/cli-1.1.34-v2gbtt59.mjsView on unpkg · L49

dist/chunks/node-1.1.34-sdqnj3qm.mjsView file

5${J}`,"utf-8").digest("hex")}class w0{constructor(J,Q,$){this.mode=J,this.cap=Q,this.waiveWindow=$,this.attempted=0,this.capped=0,this.suppressed=0}takeSlot(){if(this.attempted>=th... L6: ${Q.memoryStoreId}`);for await(let[$,q]of K(this,k,"m",DQ).call(this,Q.memoryStoreId,"full"))if(await K(this,k,"m",gQ).call(this,Q,$,q.content??""))Q.baseline.set($,q.content_sha25... L7: `),Y=Math.max(0,z-1),U=Z>0?Z:X.length;return X.slice(Y,U).join(`

High

Child Process

Package source references child process execution.

dist/chunks/node-1.1.34-sdqnj3qm.mjsView on unpkg · L5

cli-wrapper.cjsView file

14L15: const { spawnSync } = require('child_process') L16: const { arch, constants } = require('os')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

cli-wrapper.cjsView on unpkg · L14

dist/chunks/cli-1.1.34-yrk4mxjw.mjsView file

1import{r6 as h2,t6 as G8}from"./cli-1.1.34-1xg52b7q.mjs";import{v6 as M,w6 as jJ}from"./cli-1.1.34-7bxexffs.mjs";import{y6 as I5,z6 as GJ}from"./cli-1.1.34-4zj4kbw4.mjs";import{x7 ... L2: `;await B0("security",["-i"],{input:q,reject:!1}),J=!0}catch(Q){b(Q)}let Z=$5($);_((Q)=>{let Y=Q.customApiKeyResponses?.approved??[];return{...Q,primaryApiKey:J?Q.primaryApiKey:$,c...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunks/cli-1.1.34-yrk4mxjw.mjsView on unpkg · L1

dist/chunks/watchLoop-1.1.34-tnjnpc05.mjsView file

1import{a as A,g as j}from"./cli-1.1.34-he92bjvt.mjs";import{nga as $,sga as C}from"./cli-1.1.34-wwjkncsv.mjs";import"./cli-1.1.34-p5v4dwpg.mjs";import"./cli-1.1.34-37g65vk7.mjs";im... L2: ${X}`)}`;Z.push({id:G,title:W||U(X),body:X||W})}return Z}function N(q){return typeof q==="object"&&q!==null&&!Array.isArray(q)}function J(q){return typeof q==="string"&&q.trim()?q....

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/watchLoop-1.1.34-tnjnpc05.mjsView on unpkg · L1

dist/chunks/cli-1.1.34-zpsaqq15.mjsView file

1import{Gqa as y,Jqa as b}from"./cli-1.1.34-4x915j9t.mjs";var P0=y(($w)=>{$w.HttpAuthLocation=void 0;(function($){$.HEADER="header",$.QUERY="query"})($w.HttpAuthLocation||($w.HttpAu... L2: `).slice(0,5).filter((T)=>!T.includes("stackTraceWarning")).join(`

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/cli-1.1.34-zpsaqq15.mjsView on unpkg · L1

dist/chunks/index-1.1.34-mx39dxjj.mjsView file

20contains invisible/control Unicode U+200B (zero width space) \v\f\r\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F !"#$٪&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~°·∙√▒─│┼┤┬├┴┐┌└┘β∞φ±½¼≈«»ﻷﻸ��ﻻﻼ� ﺂ£¤ﺄ��ﺎﺏﺕﺙ،ﺝﺡﺥ٠١٢٣٤٥٦٧٨٩ﻑ؛ﺱﺵﺹ؟

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/chunks/index-1.1.34-mx39dxjj.mjsView on unpkg · L20

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.34-gmaedxb1.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.34-gmaedxb1.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.34-84707tma.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-84707tma.mjsView on unpkg

dist/chunks/cli-1.1.34-mhjjf878.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-mhjjf878.mjsView on unpkg

dist/chunks/cli-1.1.34-q83yydqv.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-q83yydqv.mjsView on unpkg

dist/chunks/cli-1.1.34-mbeaqq0q.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-mbeaqq0q.mjsView on unpkg

dist/chunks/cli-1.1.34-166q8s04.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-166q8s04.mjsView on unpkg

dist/chunks/cli-1.1.34-7bxexffs.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-7bxexffs.mjsView on unpkg

dist/chunks/openaiShim-1.1.34-kj2a4r19.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.34-kj2a4r19.mjs

dist/chunks/openaiShim-1.1.34-kj2a4r19.mjsView on unpkg · L11

Source & flagged code

19 flagged

package.jsonView file

Lines 12-52json

12 },

13 "license": "MIT",

14 "keywords": [

15 "claude-code",

16 "openai",

17 "llm",

18 "cli",

19 "agent",

20 "deepseek",

21 "ollama",

22 "gemini"

23 ],

24 "engines": {

25 "node": ">=22.12.0"

26 },

27 "type": "commonjs",

28 "bin": {

29 "claudin": "./bin/claudin.exe"

30 },

31 "scripts": {

32 "postinstall": "node install.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "optionalDependencies": {

35 "@claudiolabs/claudin-linux-x64-musl": "1.1.34",

36 "@claudiolabs/claudin-linux-arm64": "1.1.34",

37 "@claudiolabs/claudin-darwin-arm64": "1.1.34",

38 "@claudiolabs/claudin-linux-arm64-musl": "1.1.34",

39 "@claudiolabs/claudin-linux-x64": "1.1.34",

40 "@claudiolabs/claudin-win32-x64": "1.1.34",

41 "@claudiolabs/claudin-darwin-x64": "1.1.34",

42 "@claudiolabs/claudin-win32-arm64": "1.1.34"

43 },

44 "files": [

45 "bin/",

46 "dist/",

47 "install.cjs",

48 "cli-wrapper.cjs",

49 "README.md"

50 ]

51}

dist/chunks/cli-1.1.34-v2gbtt59.mjsView file

Lines 29-51javascript

29 <h1>Codex login failed</h1>

30 <p>${X2(q)}</p>

31 <p>You can close this window and try again in Claudin.</p>

32 </body>

33</

dist/chunks/node-1.1.34-sdqnj3qm.mjsView file

Lines 1-16javascript

1import{L8 as nQ,M8 as S,N8 as F,P8 as W,Q8 as bQ,R8 as iQ,S8 as HQ}from"./cli-1.1.34-exsrnr6k.mjs";import{Vpa as N,Wpa as K,Xpa as N0,Ypa as

cli-wrapper.cjsView file

Lines 1-34javascript

1#!/usr/bin/env node

2// Fallback launcher for the @claudiolabs/claudin wrapper package.

3//

4// Normally the postinstall (install.cjs) hardlinks the native binary over

5// bin/claudin.exe, so this file is never invoked. It exists for environments

6// where postinstall doesn't run (--ignore-scripts): users can run

7// `node cli-wrapper.cjs` directly and pay the Node-process spawn overhead.

8//

9// If no native binary is available for this platform (unsupported OS/arch, or

10// --omit=optional), it falls back to the Node bundle (dist/cli.mjs) shipped in

dist/chunks/cli-1.1.34-yrk4mxjw.mjsView file

Lines 1-17javascript

1import{r6 as h2,t6 as G8}from"./cli-1.1.34-1xg52b7q.mjs";import{v6 as M,w6 as jJ}from"./cli-1.1.34-7bxexffs.mjs";import{y6 as I5,z6 as GJ}from"./cli-1.1.34-4zj4kbw4.mjs";import

dist/chunks/watchLoop-1.1.34-tnjnpc05.mjsView file

Lines 1-14javascript

dist/chunks/cli-1.1.34-zpsaqq15.mjsView file

Lines 1-18javascript

1import{Gqa as y,Jqa as b}from"./cli-1.1.34-4x915j9t.mjs";var P0=y(($w)=>{$w.HttpAuthLocation=void 0;(function($){$.HEADER

dist/chunks/index-1.1.34-mx39dxjj.mjsView file

Lines 1-31javascript

1import{Gqa as A,Jqa as v}from"./cli-1.1.34-4x915j9t.mjs";var D8=A((i)=>{var B1=i&&i.__assign||function(){

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.34-saff9rp6.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.34-gmaedxb1.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.34-gmaedxb1.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.34-84707tma.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-84707tma.mjsView on unpkg

dist/chunks/cli-1.1.34-mhjjf878.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-mhjjf878.mjsView on unpkg

dist/chunks/cli-1.1.34-q83yydqv.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-q83yydqv.mjsView on unpkg

dist/chunks/cli-1.1.34-mbeaqq0q.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-mbeaqq0q.mjsView on unpkg

dist/chunks/cli-1.1.34-166q8s04.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-166q8s04.mjsView on unpkg

dist/chunks/cli-1.1.34-7bxexffs.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.34-7bxexffs.mjsView on unpkg

dist/chunks/openaiShim-1.1.34-kj2a4r19.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/chunks/openaiShim-1.1.34-kj2a4r19.mjs

dist/chunks/openaiShim-1.1.34-kj2a4r19.mjsView on unpkg · L11

@claudiolabs/claudin@1.1.34

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code