@darkhunt-security/endpoint-claude-code@0.9.8
Darkhunt endpoint adapter for Claude Code: hook codec, transcript mapper, plugin manifest.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe source implements the package’s stated Claude Code session capture and policy adapter purpose. Setup identifies the destination and asks the user to confirm it; the session data transfer is disclosed and tied to the enrolled tenant.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs setup and enrolls the machine; capture then runs on subsequent Claude Code sessions while enabled.
Impact
Session messages, thinking, tool calls, and tool results are transmitted to the configured Darkhunt tenant as documented.
Mechanism
Session hooks spool events locally and launch a forwarder that maps transcript content and sends it through the Darkhunt telemetry client.
AI rationale
The source implements the package’s stated Claude Code session capture and policy adapter purpose. Setup identifies the destination and asks the user to confirm it; the session data transfer is disclosed and tied to the enrolled tenant.
Evidence
~/.darkhunt/endpoint-config.json~/.darkhunt/spool/claude-code.jsonlClaude Code session transcript files
Network endpoints2
api.darkhunt.aiuser-configured Darkhunt API base URL
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a Claude Code endpoint adapter, and its CLI entry point is an explicit enrollment command.
- Setup documents that the user enrolls the machine and confirms the destination before session capture begins on the next session.
- Session hooks spool events and launch the forwarder only when capture is enabled in the local configuration.
- The forwarder maps Claude Code messages, thinking blocks, tool calls, and results for the package’s disclosed session-capture purpose.
- Enrollment sends the Darkhunt API key to the configured Darkhunt API base URL.
Evidence against
- Capture is enabled by default after enrollment, and the hooks run automatically during sessions.
- Captured session content, including thinking and tool results, is sent off-machine to the enrolled tenant. These behaviors are disclosed as the package’s purpose and destination.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
36 flaggeddist/bin/forwarder.mjsView file
19229patternName = github_pat
severity = critical
line = 19229
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/bin/forwarder.mjsView on unpkg · L1922919229patternName = github_pat
severity = critical
line = 19229
Critical
Secret Pattern
GitHub personal access token in dist/bin/forwarder.mjs
dist/bin/forwarder.mjsView on unpkg · L1922919230patternName = github_oauth
severity = critical
line = 19230
Critical
Secret Pattern
GitHub OAuth access token in dist/bin/forwarder.mjs
dist/bin/forwarder.mjsView on unpkg · L1923019249patternName = slack_bot_token
severity = critical
line = 19249
Findings
20 Critical11 High8 Medium4 Low
CriticalCritical Secretdist/bin/forwarder.mjs
CriticalPrevious Version Dangerous Deltadist/bin/guard.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/forwarder.mjs
CriticalSecret Patterndist/bin/backfill.mjs
Affected versions and remediation
This report applies to @darkhunt-security/endpoint-claude-code@0.9.8.
See all versions of @darkhunt-security/endpoint-claude-code for other recorded verdicts.
- Review the evidence and your use of @darkhunt-security/endpoint-claude-code@0.9.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.