registry / @darkhunt-security/endpoint-claude-code / 0.9.27
@darkhunt-security/endpoint-claude-code@0.9.27
Darkhunt endpoint adapter for Claude Code: hook codec, transcript mapper, plugin manifest.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe inspected findings resolve to package-aligned enrollment and logout behavior, and the named agent integration locations refer to Claude Code transcript roots. The scanner’s exfiltration characterization is unsupported by the inspected logout request, which uses the credential for API-key revocation.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the logout CLI while enrolled credentials are present.
Impact
The inspected behavior revokes an API key and removes local credentials; no unrelated recipient or agent configuration mutation was established.
Mechanism
The CLI sends the credential as a bearer token in a DELETE request for the corresponding tenant and API key, then clears local credential material.
AI rationale
The inspected findings resolve to package-aligned enrollment and logout behavior, and the named agent integration locations refer to Claude Code transcript roots. The scanner’s exfiltration characterization is unsupported by the inspected logout request, which uses the credential for API-key revocation.
Evidence
dist/bin/logout.mjs
Network endpoints1
api.darkhunt.ai
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes an enrollment CLI and declares no lifecycle scripts.
- The Claude Code source roots in backfill, forwarder, and status point to the local `.claude/projects` directory.
- Enrollment opens a browser for a supplied URL when invoked.
- Logout sends a DELETE request carrying a bearer token to revoke an API key, then removes or strips local credentials.
Evidence against
- The inspected network request is an explicit logout revocation call, not a transfer to an unrelated receiver.
- The inspected agent integration locations identify Claude Code transcript storage, not agent configuration mutation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/bin/enroll.mjsView file
359// packages/core/dist/cli/login.js
L360: import { spawn } from "node:child_process";
L361: import { chmodSync as chmodSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
High
Child Process
Package source references child process execution.
dist/bin/enroll.mjsView on unpkg · L359dist/bin/logout.mjsView file
10import { join } from "node:path";
L11: var CONFIG_DIR = join(homedir(), ".darkhunt");
L12:
...
L20: function resolveProfile(explicit, fromConfig) {
L21: return explicit ?? process.env["DARKHUNT_PROFILE"] ?? fromConfig ?? DEFAULT_PROFILE;
L22: }
...
L71:
L72: // node_modules/@darkhunt-security/telemetry/package.json
L73: var package_default = {
...
L79: author: "Darkhunt Limited",
L80: homepage: "https://github.com/darkhunt-security/darkhunt-telemetry-ts#readme",
L81: bugs: {
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/bin/logout.mjsView on unpkg · L10Findings
1 Critical3 High3 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/bin/logout.mjs
HighChild Processdist/bin/enroll.mjs
HighCross File Remote Execution Contextdist/bin/forwarder.mjs
HighSemantic Analysis Limiteddist/bin/status.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @darkhunt-security/endpoint-claude-code@0.9.27.
See all versions of @darkhunt-security/endpoint-claude-code for other recorded verdicts.
- Review the evidence and your use of @darkhunt-security/endpoint-claude-code@0.9.27 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.