Loading npm security reports…

@claudiolabs/claudin@1.1.37: Unknown npm security report (Allow) | LPM Firewall

registry / @claudiolabs/claudin / 1.1.37

@claudiolabs/claudin@1.1.37

⚠ Under review

Claudin — Claude Code opened to any LLM (OpenAI, Gemini, DeepSeek, Ollama, and 200+ models)

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 26 low-signal pattern(s) were surfaced and cleared.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 406 file(s), 11.9 MB of source, external domains: 1.1.1.1, 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, anthropic.com, api.anthropic.com, api.bing.microsoft.com, api.cloudflare.com, api.deepseek.com, api.exa.ai, api.firecrawl.dev, api.github.com, api.githubcopilot.com, api.groq.com, api.kimi.com, api.linkup.so, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.openai.com, api.search.brave.com, api.tavily.com, api.together.xyz, api.x.ai, api.ydc-index.io, api.z.ai, app.corridor.dev, auth.kimi.com, auth.openai.com, auth.x.ai, aws.amazon.com, beacon.claude-ai.staging.ant.dev, bedrock-runtime.us-east-1.amazonaws.com, chatgpt.com, clau.de, claude-ai.staging.ant.dev, claude-staging.fedstart.com, claude.ai, claude.com, claude.fedstart.com, cli.github.com, code.claude.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, cognitiveservices.azure.com, docs.anthropic.com, docs.aws.amazon.com, docs.claude.com, docs.expo.dev

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunks/cli-1.1.37-5ppknhpq.mjsView file

49patternName = generic_password severity = medium line = 49

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/cli-1.1.37-5ppknhpq.mjsView on unpkg · L49

dist/chunks/bridgeMain-1.1.37-btaaq723.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @claudiolabs/claudin@1.1.30 matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.30 similarity = 0.367 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/bridgeMain-1.1.37-btaaq723.mjsView on unpkg

31`),Z)k(`${H.red(Z)} L32: `)},updateSessionStatus(Z,G,L,e){if(L.type==="tool_start")A=L.summary,F=Date.now();g()},clearStatus(){d(),zz()},toggleQr(){f=!f,g()},updateSessionCount(Z,G,L){if(x===Z&&C===G&&b===... L33: `);if(N.length>=hJ)N.shift();N.push(T)});if(O.stdout)zJ({input:O.stdout}).on("line",(T)=>{if(K)K.write(T+`

High

Child Process

Package source references child process execution.

dist/chunks/bridgeMain-1.1.37-btaaq723.mjsView on unpkg · L31

1Cross-file remote execution chain: dist/chunks/bridgeMain-1.1.37-btaaq723.mjs spawns dist/chunks/cli-1.1.37-07v28734.mjs; helper contains network access plus dynamic code execution. L1: import{Aa as oz,Ca as rz,Da as nz,Ea as iz,Fa as sz,xa as cz,ya as Nz,za as az}from"./cli-1.1.37-f4cc288j.mjs";import{$a as BJ,ab as Lz,bb as CJ,cb as kz,db as hz,eb as FJ,fb as NJ... L2: `).filter((W)=>W.length>0)}function tz(z){let J=z.write??((Z)=>process.stdout.write(Z)),W=z.verbose,$=0,q="idle",K="Ready",_="",B="",E="",O="",w="",U=null,N=[],f=!1,A=null,F=0,x=0,... L3: `)){if(e.length===0){L++;continue}let $z=uz(e);L+=Math.max(1,Math.ceil($z/G))}if(Z.endsWith(` ... L31: `),Z)k(`${H.red(Z)} L32: `)},updateSessionStatus(Z,G,L,e){if(L.type==="tool_start")A=L.summary,F=Date.now();g()},clearStatus(){d(),zz()

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-1.1.37-btaaq723.mjsView on unpkg · L1

dist/chunks/cli-1.1.37-0t8trtcs.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-kvt0v6vq.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 18 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.37-0t8trtcs.mjsView on unpkg

19${Q}`,color:"permission",onCancel:()=>Z("cancel"),isCancelActive:!0,inputGuide:(A)=>A.pending?P(L,{children:["Press ",A.keyName," again to exit"]}):P(iY,{children:[U(rY,{action:"co... L20: `),G=J?0:Math.max(0,z.length-uU),K=G>0?z.slice(0,uU):z,Q=Y.sender.agent?`${Y.sender.name}, from its agent ${Y.sender.agent}`:Y.sender.name;return U(EZ,{title:"Held message from ano... L21: `),v=M.length>B,f=v?M.slice(0,B):M,C=Math.min(z??0,B),b=Math.max(0,C-f.length-(v?1:0)),k=b>0?[...f,...Array(b).fill("")]:f,S=Math.max(V,...k.map($C)),h=Math.min(S+4,q),$=h-4,e;if(Z...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunks/cli-1.1.37-0t8trtcs.mjsView on unpkg · L19

dist/chunks/cli-1.1.37-h7r11vsm.mjsView file

1import{o1 as $J,q1 as TJ}from"./cli-1.1.37-syfanvjj.mjs";import{Eda as NJ,J9 as U,Kfa as q,L9 as P,Pfa as m,V9 as QJ,X9 as jJ,_9 as w,j$ as K,k$ as f,oea as E,r_ as YJ,rda as ZJ,s_... L2: exec "${J}/node_modules/.bin/claudin" "$@"`,493))await vJ(Q,493);return!0}catch(J){return q(J),!1}}async function eJ(J,Q){try{if(!await _J())return"install_failed";let Z=await K("n... L3: `)}catch(Q){if(g(Q))return null;throw Q}}async function l(J,Q){let Y=await OJ(J,"w");try{await Y.writeFile(Q.join(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/cli-1.1.37-h7r11vsm.mjsView on unpkg · L1

dist/chunks/index-1.1.37-w2vtqz1f.mjsView file

20contains invisible/control Unicode U+200B (zero width space) \v\f\r\x0E\x0F\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F !"#$٪&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~°·∙√▒─│┼┤┬├┴┐┌└┘β∞φ±½¼≈«»ﻷﻸ��ﻻﻼ� ﺂ£¤ﺄ��ﺎﺏﺕﺙ،ﺝﺡﺥ٠١٢٣٤٥٦٧٨٩ﻑ؛ﺱﺵﺹ؟

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/chunks/index-1.1.37-w2vtqz1f.mjsView on unpkg · L20

bin/claudin.exeView file

•path = bin/claudin.exe kind = native_binary sizeBytes = 605 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/claudin.exeView on unpkg

dist/chunks/cache-probe-1.1.37-szdjedc6.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/cache-probe-1.1.37-szdjedc6.mjs#virtual:normalized:round1View on unpkg

dist/chunks/cli-1.1.37-grsmntjy.mjsView file

•matchType = token_shingles matchedPackage = @mdevs/mai-cli@1.0.17 matchedPath = dist/chunks/loadAgentsDir-BWrBBncU.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.17 similarity = 1.000 shingleOverlap = 25 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.37-grsmntjy.mjsView on unpkg

dist/chunks/cli-1.1.37-46pcgpjk.mjsView file

•matchType = token_shingles matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-vypd5zf6.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.37-46pcgpjk.mjsView on unpkg

dist/chunks/cli-1.1.37-1sn4ganc.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-01erqdx7.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.37-1sn4ganc.mjsView on unpkg

dist/chunks/cli-1.1.37-07v28734.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-hxty6b5t.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.37-07v28734.mjsView on unpkg

dist/chunks/cli-1.1.37-6k9f1kb2.mjsView file

•matchType = normalized_sha256 matchedPackage = @claudiolabs/claudin@1.1.26 matchedPath = dist/chunks/cli-1.1.26-32vewh62.mjs matchedIdentity = npm:QGNsYXVkaW9sYWJzL2NsYXVkaW4:1.1.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cli-1.1.37-6k9f1kb2.mjsView on unpkg