registry / @darkhunt-security/endpoint-claude-code / 0.9.11
@darkhunt-security/endpoint-claude-code@0.9.11
Darkhunt endpoint adapter for Claude Code: hook codec, transcript mapper, plugin manifest.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package captures and forwards sensitive Claude Code session content, but this is its stated purpose and the README discloses the data flow. Enrollment is explicit, setup asks the user to verify the destination, and the API key is sent to the configured Darkhunt service.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The plugin hooks run during Claude Code sessions after the user installs and configures the plugin; enrollment is an explicit CLI action.
Impact
Session content is transmitted to the enrolled tenant, as disclosed by the package. Setup directs the user to verify the destination.
Mechanism
Hooks spool session events locally; a detached forwarder ships trace data to the enrolled Darkhunt endpoint using the configured Darkhunt API key.
AI rationale
The package captures and forwards sensitive Claude Code session content, but this is its stated purpose and the README discloses the data flow. Enrollment is explicit, setup asks the user to verify the destination, and the API key is sent to the configured Darkhunt service.
Evidence
~/.darkhunt/endpoint-config.json~/.darkhunt/spool/
Network endpoints1
api.darkhunt.ai
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a Claude Code endpoint adapter and exposes a CLI binary rather than a main or exports entry point.
- The documented capture includes session messages, thinking blocks, tool calls and results, and token usage.
- The README discloses that session content leaves the machine for the enrolled Darkhunt tenant and says hooks do not contact the network directly.
- Setup instructs the user to confirm the displayed endpoint, tenant, workspace, and application before relying on the destination.
- Enrollment sends the API key to the configured API base URL, which defaults to api.darkhunt.ai; the forwarder posts traces to its configured trace endpoint.
Evidence against
- Capture is enabled by default after setup, so session content can include sensitive material.
- Plugin hooks run at session and tool-use events once the plugin is installed and configured.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
36 flaggeddist/bin/forwarder.mjsView file
19363patternName = github_pat
severity = critical
line = 19363
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/bin/forwarder.mjsView on unpkg · L1936319363patternName = github_pat
severity = critical
line = 19363
Critical
Secret Pattern
GitHub personal access token in dist/bin/forwarder.mjs
dist/bin/forwarder.mjsView on unpkg · L1936319364patternName = github_oauth
severity = critical
line = 19364
Critical
Secret Pattern
GitHub OAuth access token in dist/bin/forwarder.mjs
dist/bin/forwarder.mjsView on unpkg · L1936419383patternName = slack_bot_token
severity = critical
line = 19383
Findings
20 Critical11 High8 Medium4 Low
CriticalCritical Secretdist/bin/forwarder.mjs
CriticalPrevious Version Dangerous Deltadist/bin/guard.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/backfill.mjs
Affected versions and remediation
This report applies to @darkhunt-security/endpoint-claude-code@0.9.11.
See all versions of @darkhunt-security/endpoint-claude-code for other recorded verdicts.
- Review the evidence and your use of @darkhunt-security/endpoint-claude-code@0.9.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.