Loading npm security reports…

@lifeaitools/clauth@2.15.16: Malicious npm security report | LPM Firewall

registry / @lifeaitools/clauth / 2.15.16

@lifeaitools/clauth@2.15.16

Hardware-bound credential vault for the LIFEAI infrastructure stack

AI Security Review

scanned 26d ago · by lpm-firewall-ai

Installing the package activates a Windows postinstall hook that creates and starts a privileged, hidden logon persistence task. The task perpetually relaunches the package daemon and the hook can silently install additional system software.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation on Windows

Impact

A package install can create elevated persistent execution and add system dependencies without an explicit user command.

Mechanism

postinstall PowerShell scheduled-task persistence and silent system-package installation

Attack narrative

The package declares a postinstall hook. On Windows it copies its watchdog payload into AppData, registers and starts a hidden PowerShell task at logon with highest run level and execution-policy bypass, then installs rclone and PowerShell silently through winget. The copied payload loops forever and restarts clauth when its local service is unavailable. This is unconsented install-time persistence, not merely an explicit setup command.

AI rationale

The lifecycle hook creates privileged persistence and installs software automatically, establishing a concrete install-hook abuse path. The source also contains an explicit scanner-avoidance comment, increasing confidence in malicious intent.

Evidence

package.jsonscripts/postinstall.jscli/assets/watchdog.ps1cli/dashboard/panels/services-panel.js%APPDATA%\clauth\watchdog.ps1ClautWatchdog

Decision evidence

Source & flagged code

35 flagged

package.jsonView file

Lines 1-36json

2 "name": "@lifeaitools/clauth",

3 "version": "2.15.16",

4 "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",

5 "type": "module",

6 "bin": {

7 "clauth": "./cli/index.js"

8 },

9 "scripts": {

10 "build": "node scripts/build.mjs",

11 "test": "node --test cli/commands/scrub.test.js cli/commands/login.test.js cli/api.classify.test.js cli/supervisor-registry.test.js cli/supervisor-ui.test.js cli/fingerprint.test.js cli/recovery.test.js cli/watchdog-registry.test.js cli/commands/ops.test.js cli/ops/operation-policy.test.js cli/lib/fs-git.test.js cli/webdav-service.test.js cli/webdav-config.test.js cli/webdav-obscure.test.js cli/mcp/tool-schemas.test.js cli/services/service-status.test.js cli/services/fs-mount.test.js cli/services/fs-upload-sessions.test.js cli/services/git-exec.test.js cli/services/file-io.test.js cli/serv ...

12 "test:studio-debug": "node --test test/studio-debug.test.mjs",

13 "test:agent-pool": "node test/agent-pool.test.mjs",

14 "test:call-agent-10": "node test/call-agent-10-skills.test.mjs",

15 "test:call-agent-guard": "node test/call-agent-guard.test.mjs",

16 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 "worker:start": "node cli/index.js serve",

18 "worker:stop": "curl -s http://127.0.0.1:52437/shutdown 2>nul || taskkill /F /IM cloudflared.exe 2>nul & exit 0",

19 "worker:restart": "npm run worker:stop && timeout /t 3 /nobreak >nul && npm run worker:start"

20 },

21 "dependencies": {

22 "@lifeaitools/clauth-surface-sdk": "^0.1.0",

23 "@vscode/ripgrep": "^1.15.9",

24 "chalk": "^5.3.0",

25 "commander": "^12.1.0",

26 "conf": "^13.0.0",

27 "fast-glob": "^3.3.2",

28 "inquirer": "^10.1.0",

29 "node-fetch": "^3.3.2",

30 "ora": "^8.1.0",

31 "pm2": "^7.0.3",

32 "typescript": "^5.9.3"

33 },

34 "engines": {

35 "node": ">=18.0.0"

36 },

Long lines were clipped for display.

.clauth-skill/references/keys-guide.mdView file

Lines 74-114markdown

75### 4. Database Connection String — `supabase-db` in clauth

76```

77postgres://postgres.uvojezuorjgqzmhhgluu:[YOUR-PASSWORD]@aws-0-us-west-1.pooler.supabase.com:6543/postgres

78```

79This is for direct SQL access — tools like Drizzle, Prisma, or raw psql use this. Two versions exist:

80- **Pooled** (port 6543) — for apps with many connections (use this)

81- **Direct**

cli/watchdog-registry.jsView file

Lines 1-23javascript

1import fs from "fs";

2import os from "os";

3import path from "path";

4import { spawnSync } from "child_process";

cli/fingerprint.jsView file

Lines 1-35javascript

1// cli/fingerprint.js

2// Collects stable hardware identifiers and derives HMAC tokens

3// Works on Windows (primary) + Linux/macOS (fallback)

5import { execSync } from "child_process";

6import { createHmac, createHash } from "crypto";

7import os from

cli/supervisor-ui.test.jsView file

Lines 123-163javascript

123 // and these tests would pass by testing nothing.

124 //

125 // Lazily instantiated + connectedCallback()'d (structural: builds the fake

126 // shadow root so this.$()/this.$$() resolve), one singleton per tag name —

127 // matching production, where exactly one of each panel tag exists in the

128 // page. mount() is deliberately NOT called: none of the write-action methods

129 // under test here depend on mount()-installed instance state, and skipping

cli/commands/serve.jsView file

Lines 1-26javascript

1// cli/commands/serve.js

2// Localhost-only credential daemon with daemon lifecycle management

3// Binds 127.0.0.1 ONLY — unreachable from outside the machine

4// 3 failed requests of any kind → process exits, requires manual restart

5// Supports: start (background daemon), stop, restart, ping, foreground

7import http from "http";

8import crypto from

cli/http/components/system-component.jsView file

147const out = fs.openSync(LOG_FILE, "a"); L148: const childEnv = { ...process.env, __CLAUTH_DAEMON: "1" }; L149: delete childEnv.__CLAUTH_STAGED; // Clear staged flag — child is live L150: const child = spawn(process.execPath, childArgs, { L151: detached: true, ... L162: try { L163: const resp = await fetch(`http://127.0.0.1:${LIVE_PORT}/ping`); L164: if (resp.ok) { promoted = true; break; }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli/http/components/system-component.jsView on unpkg · L147

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/http/components/system-component.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/http/components/system-component.jsView on unpkg

cli/commands/install.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. cli/commands/install.js: import { createInterface } from 'readline'; ? join(process.env.USERPROFILE || '', '.claude', 'skills') : join(process.env.HOME || '', '.claude', 'skills')); // Prompt helpers — single shared readline to headers: { 'Authorization': `Bearer ${pat}`, 'Content-Type': 'application/json' }, headers: { 'Authorization': `Bearer ${pat}` }, method: 'GET', headers: { 'Authorization': 'Bearer test' } if (!anon || !serviceRole) throw new Error('API keys not found in response');

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli/commands/install.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/commands/install.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/install.jsView on unpkg

scripts/bootstrap.cjsView file

3'use strict'; L4: const { execSync, spawnSync } = require('child_process'); L5: const { join } = require('path'); L6: const ROOT = join(__dirname, '..'); L7: ... L17: if (!check('git')) { L18: console.error(' x git not found. Install from https://git-scm.com'); L19: process.exit(1); ... L50: L51: var platform = process.platform; L52: var installCmd = null; ... L70: if (installCmd) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/bootstrap.cjsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = scripts/bootstrap.cjs matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bootstrap.cjsView on unpkg

scripts/bin/bootstrap-win.exeView file

•path = scripts/bin/bootstrap-win.exe kind = native_binary sizeBytes = 37672227 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

scripts/bin/bootstrap-win.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1342 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

cli/dashboard/dashboard.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

cli/dashboard/dashboard.js#virtual:normalized:round1View on unpkg

cli/commands/agent-pool.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/commands/agent-pool.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/agent-pool.jsView on unpkg

cli/commands/doctor.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/commands/doctor.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/doctor.jsView on unpkg

cli/http/components/tunnel-component.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/http/components/tunnel-component.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/http/components/tunnel-component.jsView on unpkg

cli/mcp/providers/clauth-core-provider.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/mcp/providers/clauth-core-provider.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/mcp/providers/clauth-core-provider.jsView on unpkg

cli/studio-debug.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/studio-debug.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/studio-debug.jsView on unpkg

cli/commands/npm.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/commands/npm.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/npm.jsView on unpkg

cli/commands/watchdog.jsView file

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/commands/watchdog.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/watchdog.jsView on unpkg

cli/index.jsView file

309patternName = generic_password severity = medium line = 309

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L309

447patternName = generic_password severity = medium line = 447

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L447

448patternName = generic_password severity = medium line = 448

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L448

cli/commands/scrub.test.jsView file

18patternName = github_pat severity = critical line = 18

Critical

Secret Pattern

GitHub personal access token in cli/commands/scrub.test.js

cli/commands/scrub.test.jsView on unpkg · L18

Source & flagged code

35 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

.clauth-skill/references/keys-guide.mdView file

94patternName = github_pat severity = critical line = 94

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.clauth-skill/references/keys-guide.mdView on unpkg · L94

94patternName = github_pat severity = critical line = 94

Critical

Secret Pattern

GitHub personal access token in .clauth-skill/references/keys-guide.md

.clauth-skill/references/keys-guide.mdView on unpkg · L94

cli/watchdog-registry.jsView file

3import path from "path"; L4: import { spawnSync } from "child_process"; L5:

High

Child Process

Package source references child process execution.

cli/watchdog-registry.jsView on unpkg · L3

cli/fingerprint.jsView file

15// Cache path — avoids re-querying WMI/CIM on every daemon start. L16: // This eliminates the spawnSync cmd.exe ETIMEDOUT crash that occurs L17: // when PowerShell/WMI is slow on first call after boot.

High

Shell

Package source references shell execution.

cli/fingerprint.jsView on unpkg · L15

•matchType = normalized_sha256 matchedPackage = @lifeaitools/clauth@2.15.15 matchedPath = cli/fingerprint.js matchedIdentity = npm:QGxpZmVhaXRvb2xzL2NsYXV0aA:2.15.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/fingerprint.jsView on unpkg

cli/supervisor-ui.test.jsView file

143URL, L144: URLSearchParams, L145: encodeURIComponent, ... L194: }, L195: async fetch(url, options) { L196: const opts = options || {}; ... L277: assert.equal(writes[0].options.headers['X-Clauth-Write-Token'], 'wt-fresh'); L278: assert.deepEqual(JSON.parse(writes[0].options.body), { action: 'restart' }); L279: });

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

cli/supervisor-ui.test.jsView on unpkg · L143

cli/commands/serve.jsView file

6L7: import http from "http"; L8: import crypto from "crypto"; ... L34: import ora from "ora"; L35: import { execFileSync, execSync as execSyncTop, spawn } from "child_process"; L36: import Conf from "conf"; ... L101: L102: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L103: const CLAUTH_ROOT_DIR = path.join(__dirname, "../.."); L104: const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "../../package.json"), "utf8")); L105: const VERSION = pkg.version; ... L115: // throws "fatal: not a git repository" here, caught below -- but execSync's

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

cli/commands/serve.jsView on unpkg · L6

6Trigger-reachable chain: manifest.bin -> cli/index.js -> cli/commands/serve.js L6: L7: import http from "http"; L8: import crypto from "crypto"; ... L34: import ora from "ora"; L35: import { execFileSync, execSync as execSyncTop, spawn } from "child_process"; L36: import Conf from "conf"; ... L101: L102: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L103: const CLAUTH_ROOT_DIR = path.join(__dirname, "../.."); L104: const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "../../package.json"), "utf8")); L105: const VERSION = pkg.version; ... L115: // throws "fatal: not a git repository" here, caught below -- but execSync's

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

cli/commands/serve.jsView on unpkg · L6

6Trigger-reachable credential exfiltration chain: manifest.bin -> cli/index.js -> cli/commands/serve.js L6: L7: import http from "http"; L8: import crypto from "crypto"; ... L34: import ora from "ora"; L35: import { execFileSync, execSync as execSyncTop, spawn } from "child_process"; L36: import Conf from "conf"; ... L101: L102: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L103: const CLAUTH_ROOT_DIR = path.join(__dirname, "../.."); L104: const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "../../package.json"), "utf8")); L105: const VERSION = pkg.version; ... L115: // throws "fatal: not a git repository" here, caught below -- but execSync's

cli/http/components/system-component.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli/http/components/system-component.jsView on unpkg · L147

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/http/components/system-component.jsView on unpkg

cli/commands/install.jsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli/commands/install.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/install.jsView on unpkg

scripts/bootstrap.cjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/bootstrap.cjsView on unpkg · L3

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bootstrap.cjsView on unpkg

scripts/bin/bootstrap-win.exeView file

•path = scripts/bin/bootstrap-win.exe kind = native_binary sizeBytes = 37672227 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

scripts/bin/bootstrap-win.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1342 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

cli/dashboard/dashboard.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

cli/dashboard/dashboard.js#virtual:normalized:round1View on unpkg

cli/commands/agent-pool.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/agent-pool.jsView on unpkg

cli/commands/doctor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/doctor.jsView on unpkg

cli/http/components/tunnel-component.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/http/components/tunnel-component.jsView on unpkg

cli/mcp/providers/clauth-core-provider.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/mcp/providers/clauth-core-provider.jsView on unpkg

cli/studio-debug.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/studio-debug.jsView on unpkg

cli/commands/npm.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/npm.jsView on unpkg

cli/commands/watchdog.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/watchdog.jsView on unpkg

cli/index.jsView file

309patternName = generic_password severity = medium line = 309

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L309

447patternName = generic_password severity = medium line = 447

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L447

448patternName = generic_password severity = medium line = 448

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L448

cli/commands/scrub.test.jsView file

18patternName = github_pat severity = critical line = 18

Critical

Secret Pattern

GitHub personal access token in cli/commands/scrub.test.js

cli/commands/scrub.test.jsView on unpkg · L18

Findings

5 Critical21 High11 Medium5 Low

CriticalCritical Secret.clauth-skill/references/keys-guide.md

CriticalCredential Exfiltrationcli/commands/serve.js

CriticalTrigger Reachable Dangerous Capabilitycli/commands/serve.js

CriticalSecret Pattern.clauth-skill/references/keys-guide.md

CriticalSecret Patterncli/commands/scrub.test.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processcli/watchdog-registry.js

HighShellcli/fingerprint.js

HighSame File Env Network Executioncli/http/components/system-component.js

HighCredential Redirect Persistencecli/commands/install.js

HighSandbox Evasion Gated Capabilityscripts/bootstrap.cjs

HighTrigger Reachable Credential Exfiltrationcli/commands/serve.js

HighTrigger Reachable Persistencecli/commands/serve.js

HighSemantic Analysis Limitedcli/dashboard/dashboard.js#virtual:normalized:round1

HighKnown Malware Source Similaritycli/commands/agent-pool.js

HighKnown Malware Source Similaritycli/commands/doctor.js

HighKnown Malware Source Similaritycli/commands/install.js

HighKnown Malware Source Similaritycli/http/components/tunnel-component.js

HighKnown Malware Source Similaritycli/mcp/providers/clauth-core-provider.js

HighKnown Malware Source Similaritycli/studio-debug.js

HighKnown Malware Source Similarityscripts/bootstrap.cjs

HighKnown Malware Source Similaritycli/commands/npm.js

HighKnown Malware Source Similaritycli/commands/serve.js

HighKnown Malware Source Similaritycli/commands/watchdog.js

HighKnown Malware Source Similaritycli/fingerprint.js

HighKnown Malware Source Similaritycli/http/components/system-component.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumUnsafe Vm Contextcli/supervisor-ui.test.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencecli/commands/serve.js

MediumShips Native Binaryscripts/bin/bootstrap-win.exe

MediumShips Build Helperinstall.sh

MediumStructural Risk Force Deep Review

MediumSecret Patterncli/index.js

LowScripts Present

LowWeak Cryptocli/commands/serve.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

35 flagged

package.jsonView file

Lines 1-36json

2 "name": "@lifeaitools/clauth",

3 "version": "2.15.16",

4 "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",

5 "type": "module",

6 "bin": {

7 "clauth": "./cli/index.js"

8 },

9 "scripts": {

10 "build": "node scripts/build.mjs",

12 "test:studio-debug": "node --test test/studio-debug.test.mjs",

13 "test:agent-pool": "node test/agent-pool.test.mjs",

14 "test:call-agent-10": "node test/call-agent-10-skills.test.mjs",

15 "test:call-agent-guard": "node test/call-agent-guard.test.mjs",

16 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 "worker:start": "node cli/index.js serve",

18 "worker:stop": "curl -s http://127.0.0.1:52437/shutdown 2>nul || taskkill /F /IM cloudflared.exe 2>nul & exit 0",

19 "worker:restart": "npm run worker:stop && timeout /t 3 /nobreak >nul && npm run worker:start"

20 },

21 "dependencies": {

22 "@lifeaitools/clauth-surface-sdk": "^0.1.0",

23 "@vscode/ripgrep": "^1.15.9",

24 "chalk": "^5.3.0",

25 "commander": "^12.1.0",

26 "conf": "^13.0.0",

27 "fast-glob": "^3.3.2",

28 "inquirer": "^10.1.0",

29 "node-fetch": "^3.3.2",

30 "ora": "^8.1.0",

31 "pm2": "^7.0.3",

32 "typescript": "^5.9.3"

33 },

34 "engines": {

35 "node": ">=18.0.0"

36 },

Long lines were clipped for display.

.clauth-skill/references/keys-guide.mdView file

Lines 74-114markdown

75### 4. Database Connection String — `supabase-db` in clauth

76```

77postgres://postgres.uvojezuorjgqzmhhgluu:[YOUR-PASSWORD]@aws-0-us-west-1.pooler.supabase.com:6543/postgres

78```

79This is for direct SQL access — tools like Drizzle, Prisma, or raw psql use this. Two versions exist:

80- **Pooled** (port 6543) — for apps with many connections (use this)

81- **Direct**

cli/watchdog-registry.jsView file

Lines 1-23javascript

1import fs from "fs";

2import os from "os";

3import path from "path";

4import { spawnSync } from "child_process";

cli/fingerprint.jsView file

Lines 1-35javascript

1// cli/fingerprint.js

2// Collects stable hardware identifiers and derives HMAC tokens

3// Works on Windows (primary) + Linux/macOS (fallback)

5import { execSync } from "child_process";

6import { createHmac, createHash } from "crypto";

7import os from

cli/supervisor-ui.test.jsView file

Lines 123-163javascript

123 // and these tests would pass by testing nothing.

124 //

125 // Lazily instantiated + connectedCallback()'d (structural: builds the fake

126 // shadow root so this.$()/this.$$() resolve), one singleton per tag name —

127 // matching production, where exactly one of each panel tag exists in the

128 // page. mount() is deliberately NOT called: none of the write-action methods

129 // under test here depend on mount()-installed instance state, and skipping

cli/commands/serve.jsView file

Lines 1-26javascript

1// cli/commands/serve.js

2// Localhost-only credential daemon with daemon lifecycle management

3// Binds 127.0.0.1 ONLY — unreachable from outside the machine

4// 3 failed requests of any kind → process exits, requires manual restart

5// Supports: start (background daemon), stop, restart, ping, foreground

7import http from "http";

8import crypto from

cli/http/components/system-component.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli/http/components/system-component.jsView on unpkg · L147

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/http/components/system-component.jsView on unpkg

cli/commands/install.jsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli/commands/install.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/install.jsView on unpkg

scripts/bootstrap.cjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/bootstrap.cjsView on unpkg · L3

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bootstrap.cjsView on unpkg

scripts/bin/bootstrap-win.exeView file

•path = scripts/bin/bootstrap-win.exe kind = native_binary sizeBytes = 37672227 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

scripts/bin/bootstrap-win.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1342 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

cli/dashboard/dashboard.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

cli/dashboard/dashboard.js#virtual:normalized:round1View on unpkg

cli/commands/agent-pool.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/agent-pool.jsView on unpkg

cli/commands/doctor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/doctor.jsView on unpkg

cli/http/components/tunnel-component.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/http/components/tunnel-component.jsView on unpkg

cli/mcp/providers/clauth-core-provider.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/mcp/providers/clauth-core-provider.jsView on unpkg

cli/studio-debug.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/studio-debug.jsView on unpkg

cli/commands/npm.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/npm.jsView on unpkg

cli/commands/watchdog.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/commands/watchdog.jsView on unpkg

cli/index.jsView file

309patternName = generic_password severity = medium line = 309

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L309

447patternName = generic_password severity = medium line = 447

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L447

448patternName = generic_password severity = medium line = 448

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L448

cli/commands/scrub.test.jsView file

18patternName = github_pat severity = critical line = 18

Critical

Secret Pattern

GitHub personal access token in cli/commands/scrub.test.js

cli/commands/scrub.test.jsView on unpkg · L18

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code