Loading npm security reports…

@claudiolabs/claudin@1.1.35: Manual Review npm security report | LPM Firewall

registry / @claudiolabs/claudin / 1.1.35

@claudiolabs/claudin@1.1.35

⚠ Under review

Claudin — Claude Code opened to any LLM (OpenAI, Gemini, DeepSeek, Ollama, and 200+ models)

AI Security Review

scanned 13d ago · by lpm-firewall-ai

Inspected install and the listed high-signal chunks show a native-binary postinstall, CLI update, editor spawn, permission UI, and bundled libraries. No confirmed theft, remote payload, or unconsented agent-control write was established. A clean verdict cannot be published because the required citation set exceeds the eight-citation limit.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

No confirmed attack trigger. npm postinstall runs install.cjs when the package is installed.

Impact

No confirmed malicious impact. The remaining limit is citation capacity for a clean publication, not an identified compromise.

Mechanism

install.cjs hardlinks or copies a matching optional platform binary over bin/claudin.exe and may copy vendored ripgrep beside it. Other inspected chunks implement CLI features and libraries.

AI rationale

The postinstall and sampled required chunks behave as a native CLI installer and product code, without a concrete exfiltration or control-hijack chain. A clean publication is blocked because eleven required paths cannot fit in eight citations, so the review stays unresolved.

Decision evidence

public snapshot

AI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json postinstall only runs node install.cjs.
install.cjs places the platform binary at bin/claudin.exe inside this package.

Source & flagged code

24 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/openaiShim-1.1.35-6gbm01ym.mjsView file

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/openaiShim-1.1.35-6gbm01ym.mjsView on unpkg · L11

dist/chunks/cli-1.1.35-8qdvqjz3.mjsView file

1import{Xra as b}from"./cli-1.1.35-c05841mj.mjs";import*as q from"node:child_process";import*as v from"node:crypto";import*as w from"node:fs";import*as x from"node:os";import*as z f... L2: export{q as T9,v as U9,w as V9,x as W9,z as X9,A as Y9,B as Z9,k as _9};

High

Child Process

Package source references child process execution.

dist/chunks/cli-1.1.35-8qdvqjz3.mjsView on unpkg · L1

dist/chunks/cli-1.1.35-hy9jtbmb.mjsView file

842`),Q=[];for(let Y of Z){let X=Y.match(/^([a-zA-Z_-]+):\s+(.+)$/);if(X){let[,q,K]=X;if(!q||!K){Q.push(Y);continue}if(K.startsWith('"')&&K.endsWith('"')||K.startsWith("'")&&K.endsWit... L843: `)}function UJ(J,Z){let Q=J.match(RG8);if(!Q)return{frontmatter:{},content:J};let Y=Q[1]||"",X=J.slice(Q[0].length),q={};try{let K=U70(Y);if(K&&typeof K==="object"&&!Array.isArray(... L844: `).filter((q)=>q),Y=Math.min(...Q.map((q)=>q.length-q.trimStart().length)),X=Q.map((q)=>q.slice(Y)).map((q)=>" ".repeat(this.indent*2)+q);for(let q of X)this.content.push(q)}compil... L845: `))}}var m70=()=>{};var LS0;var p70=R(()=>{LS0={major:4,minor:4,patch:3}});function lS0(J){if(J==="")return!0;if(/\s/.test(J))return!1;if(J.length%4!==0)return!1;try{return atob(J)... L846: if (${I}.issues.length) {

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/cli-1.1.35-hy9jtbmb.mjsView on unpkg · L842

1import{dU as rT9,eU as tM6}from"./cli-1.1.35-589b1qht.mjs";import{fU as XU9,gU as oV,hU as hJ6,jU as cj9,kU as dj9,lU as EJ6}from"./cli-1.1.35-7y74em05.mjs";import{CU as WF9,EU as ... L2: ... L13: - Watch/interactive flags (--watch, --ui) are stripped so the run terminates. L14: - Use plain Bash only when you need raw output or a non-test command.`,rD0="Run the project's test suite and get back a failures-first summary: counts, and for each failure the tes... L15: ... L115: Sources: L116: - [Source Title 1](https://example.com/1) L117: - [Source Title 2](https://example.com/2) ... L177: - For GitHub URLs, prefer using the gh CLI via Bash instead (e.g., gh pr view, gh issue view, gh api). L178: `;var yY=()=>{};var X6="PowerShell";var wW=()=>{};function kT(){if(J9()!=="windows")return!

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunks/cli-1.1.35-18wszrez.mjsView file

1import{W2 as $J,Z2 as TJ}from"./cli-1.1.35-8ttx7y70.mjs";import{Eha as m,G$ as QJ,I$ as jJ,L$ as w,dga as E,iba as K,ifa as ZJ,jba as f,paa as YJ,qaa as xJ,u$ as U,vfa as NJ,w$ as ... L2: exec "${J}/node_modules/.bin/claudin" "$@"`,493))await vJ(Q,493);return!0}catch(J){return q(J),!1}}async function eJ(J,Q){try{if(!await _J())return"install_failed";let Z=await K("n... L3: `)}catch(Q){if(g(Q))return null;throw Q}}async function l(J,Q){let Y=await OJ(J,"w");try{await Y.writeFile(Q.join(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/cli-1.1.35-18wszrez.mjsView on unpkg · L1

dist/chunks/index-1.1.35-eejex06g.mjsView file

1import{R9 as ve,S9 as L}from"./cli-1.1.35-2x0m7ewe.mjs";import{Lra as _e}from"./cli-1.1.35-h262sgvd.mjs";import{Ora as Ke,Rra as he,Sra as Se}from"./cli-1.1.35-t2vx6b45.mjs";import... L2: - loopback CIDR 127.0.0.0/8 or [::1/128] L3: - ECS container host 169.254.170.2 L4: - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:j})};ye.checkUrl=Ae});var Ce=H((B)=>{Object.defineProperty(B,"__esModule",{value:!0});B.resolveHttpHandlerRuntimeConf... L5: Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:f.logger});let n=new URL(j);(0,ut.checkUrl)(n,f.logger);let r=nt.NodeHttpHandler.create({...

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/index-1.1.35-eejex06g.mjsView on unpkg · L1

dist/chunks/bridgeMain-1.1.35-7awverkv.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.30 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.30 similarity = 0.375 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.35-7awverkv.mjsView on unpkg

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.35-7awverkv.mjs spawns dist/chunks/cli-1.1.35-4g77zek0.mjs; helper contains network access plus dynamic code execution. L1: import{T as CJ,U as Mz,V as PJ,W as Sz,X as uz,Y as yJ}from"./cli-1.1.35-dwaz1jv4.mjs";import{_ as Az}from"./cli-1.1.35-kkhrpw6q.mjs";import{ia as UJ,ja as RJ,ka as AJ,la as DJ,ma ... L2: `).filter((X)=>X.length>0)}function zJ(z){let J=z.write??((Z)=>process.stdout.write(Z)),X=z.verbose,$=0,O="idle",K="Ready",P="",F="",D="",B="",T="",R=null,C=[],M=!1,E=null,_=0,f=0,... L3: `)){if(Wz.length===0){x++;continue}let Nz=lz(Wz);x+=Math.max(1,Math.ceil(Nz/j))}if(Z.endsWith(` ... L31: `),Z)h(`${Q.red(Z)} L32: `)},updateSessionStatus(Z,j,x,Wz){if(x.type==="tool_start")E=x.summary,_=Date.now();S()},clearStatus(){r(),t

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.35-7awverkv.mjsView on unpkg · L1

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cli-1.1.35-18wszrez.mjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cli-1.1.35-18wszrez.mjs#virtual:string-array:round1View on unpkg

dist/chunks/cli-1.1.35-f6sa351s.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-vypd5zf6.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.35-f6sa351s.mjsView on unpkg

dist/chunks/cli-1.1.35-8b1qqrev.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-55ayan24.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 32 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.35-8b1qqrev.mjsView on unpkg

dist/chunks/cli-1.1.35-swxcv3xf.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-01erqdx7.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.35-swxcv3xf.mjsView on unpkg

dist/chunks/cli-1.1.35-4g77zek0.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-hxty6b5t.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.35-4g77zek0.mjsView on unpkg

dist/chunks/cli-1.1.35-a9y8qxsj.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-32vewh62.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.35-a9y8qxsj.mjsView on unpkg