registry / @darkhunt-security/endpoint-claude-code / 0.9.13
@darkhunt-security/endpoint-claude-code@0.9.13
Darkhunt endpoint adapter for Claude Code: hook codec, transcript mapper, plugin manifest.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe credential flow uses a Darkhunt API key with the Darkhunt API, and setup presents the session destination for confirmation. Session capture is the stated package function and is documented as configurable; no unrelated collection or malicious behavior was identified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs setup/enrollment; capture begins on a later Claude Code session when enabled in configuration.
Impact
Session content is transmitted to the enrolled Darkhunt tenant as the package describes; no unrelated credential collection or destination was identified.
Mechanism
Enrollment sends the Darkhunt API key to the selected Darkhunt API. Hooks spool session events, and the forwarder posts them to the configured trace-hub endpoint.
AI rationale
The credential flow uses a Darkhunt API key with the Darkhunt API, and setup presents the session destination for confirmation. Session capture is the stated package function and is documented as configurable; no unrelated collection or malicious behavior was identified.
Evidence
~/.darkhunt/endpoint-config.json
Network endpoints2
api.darkhunt.ai<configured apiBaseUrl>/trace-hub
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only package binary is an explicit enrollment command.
- Enrollment sends the Darkhunt API key to the selected Darkhunt API base to discover the user's account scope.
- Setup tells the user where sessions will be sent and asks them to confirm the destination.
- Session capture and transmission to the enrolled Darkhunt tenant are disclosed as the package's purpose.
- The spool hook records events and starts capture only when configuration and capture are enabled.
- The forwarder sends data to the configured trace-hub endpoint.
Evidence against
- After setup, Claude session content, including prompts and tool results, is captured and sent by default; users can disable capture in configuration.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
36 flaggeddist/bin/forwarder.mjsView file
19363patternName = github_pat
severity = critical
line = 19363
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/bin/forwarder.mjsView on unpkg · L1936319363patternName = github_pat
severity = critical
line = 19363
Critical
Secret Pattern
GitHub personal access token in dist/bin/forwarder.mjs
dist/bin/forwarder.mjsView on unpkg · L1936319364patternName = github_oauth
severity = critical
line = 19364
Critical
Secret Pattern
GitHub OAuth access token in dist/bin/forwarder.mjs
dist/bin/forwarder.mjsView on unpkg · L1936419383patternName = slack_bot_token
severity = critical
line = 19383
Findings
20 Critical11 High8 Medium4 Low
CriticalCritical Secretdist/bin/forwarder.mjs
CriticalPrevious Version Dangerous Deltadist/bin/guard.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/backfill.mjs
Affected versions and remediation
This report applies to @darkhunt-security/endpoint-claude-code@0.9.13.
See all versions of @darkhunt-security/endpoint-claude-code for other recorded verdicts.
- Review the evidence and your use of @darkhunt-security/endpoint-claude-code@0.9.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.