Loading npm security reports…

@firedmosquito831/my-claude-code@6.55.1: Malicious npm security | LPM Firewall

registry / @firedmosquito831/my-claude-code / 6.55.1

@firedmosquito831/my-claude-code@6.55.1

My Claude Code (MCC): route Claude Code and other coding agents to any model provider through one local proxy with a dashboard. This npm package installs and launches the Python server.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

A global npm install automatically fetches and executes mutable remote shell or PowerShell code. The package does not pin or verify the fetched content itself.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm install -g @firedmosquito831/my-claude-code, unless its environment-based skip conditions apply.

Impact

A remote repository change can execute arbitrary commands as the installing user and install persistent external commands, a server, and a desktop application.

Mechanism

Postinstall remote-code execution through curl-to-sh or PowerShell scriptblock execution.

Attack narrative

The postinstall hook runs automatically during a qualifying global install. It retrieves an installer from a mutable GitHub branch and immediately executes it through a shell or PowerShell with execution-policy bypass. Because the downloaded installer is not included, pinned, or verified by this package, its remote maintainer can change what executes after publication. The launcher repeats this behavior when the server is missing.

AI rationale

This is an automatic install-time remote-code execution chain that can mutate the installing machine through unpinned external content. The global-install gate limits reach but does not remove the supply-chain risk.

Evidence

package.jsonbin/postinstall.jsbin/my-claude-code.js

Network endpoints2

/FiredMosquito831/my-claude-code/main/scripts/install.sh

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/my-claude-code.jsView file

14L15: const { spawnSync } = require("node:child_process"); L16: const os = require("node:os"); ... L18: L19: const LAUNCHER_VERSION = require("../package.json").version; L20: const REPO_RAW = "https://raw.githubusercontent.com/FiredMosquito831/my-claude-code/main/scripts"; L21: const IS_WINDOWS = process.platform === "win32"; L22: ... L25: function candidateBinDirs() { L26: const home = os.homedir(); L27: const dirs = [path.join(home, ".local", "bin")]; L28: if (IS_WINDOWS) {

Critical

Download Execute

Source downloads or fetches remote code and executes it.

bin/my-claude-code.jsView on unpkg · L14

14Trigger-reachable chain: manifest.bin -> bin/my-claude-code.js L14: L15: const { spawnSync } = require("node:child_process"); L16: const os = require("node:os"); ... L18: L19: const LAUNCHER_VERSION = require("../package.json").version; L20: const REPO_RAW = "https://raw.githubusercontent.com/FiredMosquito831/my-claude-code/main/scripts"; L21: const IS_WINDOWS = process.platform === "win32"; L22: ... L25: function candidateBinDirs() { L26: const home = os.homedir(); L27: const dirs = [path.join(home, ".local", "bin")]; L28: if (IS_WINDOWS) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/my-claude-code.jsView on unpkg · L14

14L15: const { spawnSync } = require("node:child_process"); L16: const os = require("node:os");

High

Child Process

Package source references child process execution.

bin/my-claude-code.jsView on unpkg · L14

bin/postinstall.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @firedmosquito831/my-claude-code@6.52.0 matchedIdentity = npm:[redacted]:6.52.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/postinstall.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @firedmosquito831/my-claude-code@6.54.0 matchedPath = bin/postinstall.js matchedIdentity = npm:[redacted]:6.54.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

Source & flagged code

11 flagged

package.jsonView file

Lines 8-48json

8 "repository": {

9 "type": "git",

10 "url": "git+https://github.com/FiredMosquito831/my-claude-code.git"

11 },

12 "bugs": {

13 "url": "https://github.com/FiredMosquito831/my-claude-code/issues"

14 },

15 "keywords": [

16 "claude-code",

17 "claude",

18 "anthropic",

19 "llm",

20 "proxy",

21 "router",

22 "openai",

23 "openrouter",

24 "coding-agent",

25 "mcc"

26 ],

27 "scripts": {

28 "postinstall": "node bin/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 },

30 "bin": {

31 "my-claude-code": "bin/my-claude-code.js",

32 "mcc": "bin/my-claude-code.js"

33 },

34 "files": [

35 "bin/",

36 "README.md",

37 "LICENSE"

38 ],

39 "engines": {

40 "node": ">=18"

41 },

42 "os": [

43 "win32",

44 "darwin",

45 "linux"

46 ],

47 "publishConfig": {

48 "access": "public"

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

bin/my-claude-code.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2"use strict";

3

4// my-claude-code on npm is a launcher, not the server. The server is a Python

5// package installed with uv from the GitHub release (digest-verified by the

6// official install script). This file installs it when it is missing and then

7// hands over to the real command with every argument untouched.

8//

9// npx my-claude-code -> install if needed, then run mcc-server

10// npx @firedmosquito831/my-claude-code install -> install or update only

bin/postinstall.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @firedmosquito831/my-claude-code@6.52.0 matchedIdentity = npm:[redacted]:6.52.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/postinstall.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @firedmosquito831/my-claude-code@6.54.0 matchedPath = bin/postinstall.js matchedIdentity = npm:[redacted]:6.54.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg