@lifeaitools/clauth@2.1.1: AI-agent control-surface risk

Loading npm security reports…

@lifeaitools/clauth@2.1.1: AI-agent control-surface risk | LPM Firewall

Source & flagged code

24 flagged

package.jsonView file

Lines 1-36json

2 "name": "@lifeaitools/clauth",

3 "version": "2.1.1",

4 "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",

5 "type": "module",

6 "bin": {

7 "clauth": "./cli/index.js"

8 },

9 "scripts": {

10 "build": "node scripts/build.mjs",

11 "test": "node --test cli/commands/scrub.test.js cli/commands/login.test.js cli/api.classify.test.js cli/supervisor-registry.test.js cli/supervisor-ui.test.js test/studio-debug.test.mjs test/dashboard-key-generator.test.mjs && node test-auth-verdict.mjs",

12 "test:studio-debug": "node --test test/studio-debug.test.mjs",

13 "test:agent-pool": "node test/agent-pool.test.mjs",

14 "test:call-agent-10": "node test/call-agent-10-skills.test.mjs",

15 "test:call-agent-guard": "node test/call-agent-guard.test.mjs",

16 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 "worker:start": "node cli/index.js serve",

18 "worker:stop": "curl -s http://127.0.0.1:52437/shutdown 2>nul || taskkill /F /IM cloudflared.exe 2>nul & exit 0",

19 "worker:restart": "npm run worker:stop && timeout /t 3 /nobreak >nul && npm run worker:start"

20 },

21 "dependencies": {

22 "@vscode/ripgrep": "^1.15.9",

23 "chalk": "^5.3.0",

24 "commander": "^12.1.0",

25 "conf": "^13.0.0",

26 "fast-glob": "^3.3.2",

27 "inquirer": "^10.1.0",

28 "node-fetch": "^3.3.2",

29 "ora": "^8.1.0",

30 "pm2": "^7.0.3",

31 "typescript": "^5.9.3"

32 },

33 "engines": {

34 "node": ">=18.0.0"

35 },

36 "keywords": [

.clauth-skill/references/keys-guide.mdView file

Lines 74-114markdown

75### 4. Database Connection String — `supabase-db` in clauth

76```

77postgres://postgres.uvojezuorjgqzmhhgluu:[YOUR-PASSWORD]@aws-0-us-west-1.pooler.supabase.com:6543/postgres

78```

79This is for direct SQL access — tools like Drizzle, Prisma, or raw psql use this. Two versions exist:

80- **Pooled** (port 6543) — for apps with many connections (use this)

81- **Direct**

cli/watchdog-registry.jsView file

Lines 1-23javascript

1import fs from "fs";

2import os from "os";

3import path from "path";

4import { spawnSync } from "child_process";

cli/fingerprint.jsView file

Lines 1-35javascript

1// cli/fingerprint.js

2// Collects stable hardware identifiers and derives HMAC tokens

3// Works on Windows (primary) + Linux/macOS (fallback)

5import { execSync } from "child_process";

6import { createHmac, createHash } from "crypto";

7import os from

cli/supervisor-ui.test.jsView file

Lines 69-109javascript

69 const sandbox = {

70 console: { log() {}, warn() {}, error() {} },

71 JSON,

72 Date,

73 Math,

74 setTimeout: () =>

cli/commands/serve.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. cli/commands/serve.js: import { appendFile, readdir, readFile, writeFile, rm, mkdir, stat, rename, cp } from "node:fs/promises"; headers: { "Authorization": `Bearer ${currentKey}`, "Content-Type": "application/json" }, headers: { "Authorization": `Bearer ${currentKey}`, "Content-Type": "application/json" }, headers: { "Authorization": `Bearer ${newKey}` }, headers: { "Authorization": `Bearer ${newKey}` }, "Authorization": `Bearer ${currentKey}`, headers: { "Authorization": `Bearer ${newKey}` }, headers: { "Authorization": `Bearer ${newKey}` },

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli/commands/serve.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. cli/commands/serve.js: import { appendFile, readdir, readFile, writeFile, rm, mkdir, stat, rename, cp } from "node:fs/promises"; const listResp = await fetch("https://api.cloudflare.com/client/v4/user/tokens", { const createResp = await fetch("https://api.cloudflare.com/client/v4/user/tokens", { const verifyResp = await fetch("https://api.cloudflare.[redacted]", { await fetch(`https://api.cloudflare.com/client/v4/user/tokens/${currentToken.id}`, { const createResp = await fetch("https://registry.npmjs.org/-/npm/v1/tokens", { const listResp = await fetch("https://registry.npmjs.org/-/npm/v1/tokens", { await fetch(`https://registry.npmjs.org/-/npm/v1/tokens/

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

cli/commands/serve.jsView on unpkg

cli/index.jsView file

Lines 1099-1139javascript

1099 const state = receipt.resulting_state?.state;

1100 if (!ok) {

1101 console.error(` ✗ ${state}: ${receipt.resulting_state?.error ||

cli/commands/install.jsView file

21import { fileURLToPath } from 'url'; L22: import { execSync } from 'child_process'; L23: import Conf from 'conf'; ... L27: L28: const __dirname = dirname(fileURLToPath(import.meta.url)); L29: const ROOT = join(__dirname, '..', '..'); L30: const MGMT = 'https://api.supabase.com/v1'; L31: const SKILLS_DIR = process.env.CLAUTH_SKILLS_DIR || L32: (process.platform === 'win32' L33: ? join(process.env.USERPROFILE || '', '.claude', 'skills') ... L43: if (!_rl) { L44: _rl = createInterface({ input: process.stdin, output: process.stdout });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli/commands/install.jsView on unpkg · L21

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@1.30.24 matchedPath = cli/commands/install.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:1.30.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/install.jsView on unpkg

scripts/bin/bootstrap-win.exeView file

•path = scripts/bin/bootstrap-win.exe kind = native_binary sizeBytes = 37672227 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

scripts/bin/bootstrap-win.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1391 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

cli/commands/codevelop.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@1.30.24 matchedPath = cli/commands/codevelop.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:1.30.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/codevelop.jsView on unpkg

cli/commands/doctor.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@1.30.24 matchedPath = cli/commands/doctor.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:1.30.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/doctor.jsView on unpkg

cli/studio-debug.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@1.30.24 matchedPath = cli/studio-debug.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:1.30.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/studio-debug.jsView on unpkg

scripts/bootstrap.cjsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@1.30.24 matchedPath = scripts/bootstrap.cjs matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:1.30.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bootstrap.cjsView on unpkg

cli/commands/scrub.test.jsView file

17patternName = github_pat severity = critical line = 17 matchedText = const GH...hars

Critical

Secret Pattern

GitHub personal access token in cli/commands/scrub.test.js

cli/commands/scrub.test.jsView on unpkg · L17

Source & flagged code

24 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

.clauth-skill/references/keys-guide.mdView file

94patternName = github_pat severity = critical line = 94 matchedText = ghp[redacted]

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.clauth-skill/references/keys-guide.mdView on unpkg · L94

94patternName = github_pat severity = critical line = 94 matchedText = ghp[redacted]

Critical

Secret Pattern

GitHub personal access token in .clauth-skill/references/keys-guide.md

.clauth-skill/references/keys-guide.mdView on unpkg · L94

cli/watchdog-registry.jsView file

3import path from "path"; L4: import { spawnSync } from "child_process"; L5:

High

Child Process

Package source references child process execution.

cli/watchdog-registry.jsView on unpkg · L3

cli/fingerprint.jsView file

15// Cache path — avoids re-querying WMI/CIM on every daemon start. L16: // This eliminates the spawnSync cmd.exe ETIMEDOUT crash that occurs L17: // when PowerShell/WMI is slow on first call after boot.

High

Shell

Package source references shell execution.

cli/fingerprint.jsView on unpkg · L15

cli/supervisor-ui.test.jsView file

89addEventListener() {}, L90: body: makeElement('body'), L91: }, L92: async fetch(url, options) { L93: const opts = options || {}; ... L174: assert.equal(writes[0].options.headers['X-Clauth-Write-Token'], 'wt-fresh'); L175: assert.deepEqual(JSON.parse(writes[0].options.body), { action: 'restart' }); L176: });

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

cli/supervisor-ui.test.jsView on unpkg · L89

cli/commands/serve.jsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli/commands/serve.jsView on unpkg

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

cli/commands/serve.jsView on unpkg

cli/index.jsView file

1119try { L1120: const r = await fetch(`http://127.0.0.1:52437/chitchat/${id}`, { signal: AbortSignal.timeout(3000) }); L1121: if (!r.ok) { ... L1131: // Find claude binary (same candidates as daemon) L1132: const { execSync: es, spawn } = await import("child_process"); L1133: let claudeBin = null; L1134: for (const c of [ L1135: process.env.CLAUDE_BIN, L1136: path.join(process.env.APPDATA || '', 'npm', 'claude.cmd'),

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli/index.jsView on unpkg · L1119

868try { L869: execSync("npm install -g @lifeaitools/clauth@latest", { stdio: "inherit" }); L870: console.log(chalk.green("\n Updated successfully.\n"));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli/index.jsView on unpkg · L868

348patternName = generic_password severity = medium line = 348 matchedText = { type: ..." },

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L348

486patternName = generic_password severity = medium line = 486 matchedText = { type: ..." },

cli/commands/install.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli/commands/install.jsView on unpkg · L21

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/install.jsView on unpkg

scripts/bin/bootstrap-win.exeView file

•path = scripts/bin/bootstrap-win.exe kind = native_binary sizeBytes = 37672227 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

scripts/bin/bootstrap-win.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1391 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

cli/commands/codevelop.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/codevelop.jsView on unpkg

cli/commands/doctor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/doctor.jsView on unpkg

cli/studio-debug.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/studio-debug.jsView on unpkg

scripts/bootstrap.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bootstrap.cjsView on unpkg

cli/commands/scrub.test.jsView file

17patternName = github_pat severity = critical line = 17 matchedText = const GH...hars

Critical

Secret Pattern

GitHub personal access token in cli/commands/scrub.test.js

cli/commands/scrub.test.jsView on unpkg · L17

Source & flagged code

24 flagged

package.jsonView file

Lines 1-36json

2 "name": "@lifeaitools/clauth",

3 "version": "2.1.1",

4 "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",

5 "type": "module",

6 "bin": {

7 "clauth": "./cli/index.js"

8 },

9 "scripts": {

10 "build": "node scripts/build.mjs",

12 "test:studio-debug": "node --test test/studio-debug.test.mjs",

13 "test:agent-pool": "node test/agent-pool.test.mjs",

14 "test:call-agent-10": "node test/call-agent-10-skills.test.mjs",

15 "test:call-agent-guard": "node test/call-agent-guard.test.mjs",

16 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 "worker:start": "node cli/index.js serve",

18 "worker:stop": "curl -s http://127.0.0.1:52437/shutdown 2>nul || taskkill /F /IM cloudflared.exe 2>nul & exit 0",

19 "worker:restart": "npm run worker:stop && timeout /t 3 /nobreak >nul && npm run worker:start"

20 },

21 "dependencies": {

22 "@vscode/ripgrep": "^1.15.9",

23 "chalk": "^5.3.0",

24 "commander": "^12.1.0",

25 "conf": "^13.0.0",

26 "fast-glob": "^3.3.2",

27 "inquirer": "^10.1.0",

28 "node-fetch": "^3.3.2",

29 "ora": "^8.1.0",

30 "pm2": "^7.0.3",

31 "typescript": "^5.9.3"

32 },

33 "engines": {

34 "node": ">=18.0.0"

35 },

36 "keywords": [

.clauth-skill/references/keys-guide.mdView file

Lines 74-114markdown

75### 4. Database Connection String — `supabase-db` in clauth

76```

77postgres://postgres.uvojezuorjgqzmhhgluu:[YOUR-PASSWORD]@aws-0-us-west-1.pooler.supabase.com:6543/postgres

78```

79This is for direct SQL access — tools like Drizzle, Prisma, or raw psql use this. Two versions exist:

80- **Pooled** (port 6543) — for apps with many connections (use this)

81- **Direct**

cli/watchdog-registry.jsView file

Lines 1-23javascript

1import fs from "fs";

2import os from "os";

3import path from "path";

4import { spawnSync } from "child_process";

cli/fingerprint.jsView file

Lines 1-35javascript

1// cli/fingerprint.js

2// Collects stable hardware identifiers and derives HMAC tokens

3// Works on Windows (primary) + Linux/macOS (fallback)

5import { execSync } from "child_process";

6import { createHmac, createHash } from "crypto";

7import os from

cli/supervisor-ui.test.jsView file

Lines 69-109javascript

69 const sandbox = {

70 console: { log() {}, warn() {}, error() {} },

71 JSON,

72 Date,

73 Math,

74 setTimeout: () =>

cli/commands/serve.jsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli/commands/serve.jsView on unpkg

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

cli/commands/serve.jsView on unpkg

cli/index.jsView file

Lines 1099-1139javascript

1099 const state = receipt.resulting_state?.state;

1100 if (!ok) {

1101 console.error(` ✗ ${state}: ${receipt.resulting_state?.error ||

cli/commands/install.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli/commands/install.jsView on unpkg · L21

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/install.jsView on unpkg

scripts/bin/bootstrap-win.exeView file

•path = scripts/bin/bootstrap-win.exe kind = native_binary sizeBytes = 37672227 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

scripts/bin/bootstrap-win.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1391 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

cli/commands/codevelop.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/codevelop.jsView on unpkg

cli/commands/doctor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/doctor.jsView on unpkg

cli/studio-debug.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/studio-debug.jsView on unpkg

scripts/bootstrap.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bootstrap.cjsView on unpkg

cli/commands/scrub.test.jsView file

17patternName = github_pat severity = critical line = 17 matchedText = const GH...hars

Critical

Secret Pattern

GitHub personal access token in cli/commands/scrub.test.js

cli/commands/scrub.test.jsView on unpkg · L17

@lifeaitools/clauth@2.1.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code