@litfamily/litclaude@1.0.15: Suspicious npm security report

Loading npm security reports…

@litfamily/litclaude@1.0.15: Suspicious npm security report | LPM Firewall

Source & flagged code

21 flagged

package.jsonView file

Lines 39-79json

39 "docs/assets/readme/ignition-film.mp4",

40 "docs/assets/readme/ignition-poster.png",

41 "docs/assets/readme/ignition-readme.gif",

42 "docs/assets/readme/Lucide-LICENSE.txt",

43 "docs/assets/readme/JetBrainsMono-OFL.txt",

44 "docs/assets/litclaude-ignition-1600.webp",

45 "docs/assets/litclaude-continuity-1600.webp",

46 "docs/assets/litfamily-machines.png",

47 "LICENSE",

48 "CONTRIBUTING.md",

49 "SECURITY.md",

50 "CODE_OF_CONDUCT.md",

51 "SUPPORT.md",

52 "docs/privacy.md"

53 ],

54 "scripts": {

55 "prepublishOnly": "node scripts/prepublish-test-gate.mjs",

56 "prepack": "node tools/readme-for-npm.mjs apply",

57 "postpack": "node tools/readme-for-npm.mjs restore",

58 "check:npm-readme": "node tools/readme-for-npm.mjs check",

59 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L59

60 "test": "node --test --test-concurrency=1 --import ./test/helpers/motion-offline-prewarm.mjs test/*.test.mjs",

61 "validate:plugin": "node scripts/validate-plugin.mjs",

62 "doctor": "node scripts/doctor.mjs",

63 "qa:tmux": "bash scripts/qa-claude-plugin-smoke.sh",

64 "qa:portable": "bash scripts/qa-portable-install.sh",

65 "qa:matrix": "node scripts/qa-negative-gate-matrix.mjs",

66 "qa:matrix-negative-control": "node scripts/qa-negative-gate-matrix.mjs --negative-control",

67 "qa:tamper": "node scripts/qa-installed-tamper-repair.mjs",

68 "qa:behaviors": "node scripts/qa-real-surface-behaviors.mjs",

69 "qa:real-surface": "npm run qa:matrix && npm run qa:tamper && npm run qa:behaviors",

70 "pack:dry-run": "npm pack --dry-run",

71 "scan:legacy-tokens": "node tools/scan-legacy-tokens.mjs",

72 "check:version": "node tools/check-version-lockstep.mjs",

73 "check:model-routing": "node tools/check-model-routing.mjs",

74 "assert:ci": "node tools/assert-ci-workflow.mjs",

75 "pack:payload-guard": "node tools/check-pack-payload.mjs",

76 "gen:runtime-closures": "node tools/gen-canonical-runtime-closures.mjs",

77 "check:runtime-closures": "node tools/gen-canonical-runtime-closures.mjs --check",

78 "gen:skill-resources": "node tools/gen-canonical-skill-resources.mjs",

79 "check:skill-resources": "node tools/gen-canonical-skill-resources.mjs --check"

bin/litclaude-ai.jsView file

Lines 1592-1632javascript

1592 runClaude(parsed);

1593 break;

1594 case "litgoal":

1595 process.exit(runLitgoalCli(parsed.rest));

1596 break;

1597

plugins/litclaude/skills/lit-typographic-motion/engine/node/ws-server.mjsView file

1// Frame egress (MO-A-02 option 1): a minimal RFC 6455 WebSocket server on 127.0.0.1 with an L2: // OS-assigned port. The page sends each frame's metadata as a text message and its RGBA bytes as a ... L13: res.writeHead(426); L14: res.end("websocket only"); L15: }); ... L22: } L23: const accept = createHash("sha1").update(key + GUID).digest("base64"); L24: sock.write(`HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: ${accept}\r\n\r\n`);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

plugins/litclaude/skills/lit-typographic-motion/engine/node/ws-server.mjsView on unpkg · L1

plugins/litclaude/lib/office_runtime_bootstrap.pyView file

•path = plugins/litclaude/lib/office_runtime_bootstrap.py kind = build_helper sizeBytes = 2650 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/litclaude/lib/office_runtime_bootstrap.pyView on unpkg

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView file

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = high_entropy_blob sizeBytes = 37588 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = compressed_blob sizeBytes = 37588 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = nested_archive_needs_inspection sizeBytes = 37588 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

plugins/litclaude/vendor/scientific-visualization/tests/test_figure_export.pyView file

•path = [redacted]-visualization/tests/test_figure_export.py kind = payload_in_excluded_dir sizeBytes = 1742 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/litclaude/vendor/scientific-visualization/tests/test_figure_export.pyView on unpkg

plugins/litclaude/lib/motion-render-gate.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

plugins/litclaude/lib/motion-render-gate.mjs#virtual:normalized:round1View on unpkg

plugins/litclaude/lib/automatic-update.mjsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = plugins/litclaude/lib/automatic-update.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/automatic-update.mjsView on unpkg

bin/update-notifier.mjsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = bin/update-notifier.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/update-notifier.mjsView on unpkg

plugins/litclaude/skills/lsp-setup/scripts/verify-lsp.tsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = plugins/litclaude/skills/lsp-setup/scripts/verify-lsp.ts matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/skills/lsp-setup/scripts/verify-lsp.tsView on unpkg

scripts/qa-negative-gate-matrix.mjsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = scripts/qa-negative-gate-matrix.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-negative-gate-matrix.mjsView on unpkg

scripts/qa-real-surface-behaviors.mjsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = scripts/qa-real-surface-behaviors.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-real-surface-behaviors.mjsView on unpkg

plugins/litclaude/skills/lit-code/scripts/typescript/check-no-excuse-rules.tsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = plugins/litclaude/skills/lit-code/scripts/typescript/check-no-excuse-rules.ts matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/skills/lit-code/scripts/typescript/check-no-excuse-rules.tsView on unpkg

scripts/inspect-agent-tools.mjsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = scripts/inspect-agent-tools.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/inspect-agent-tools.mjsView on unpkg

scripts/qa-installed-tamper-repair.mjsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = scripts/qa-installed-tamper-repair.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-installed-tamper-repair.mjsView on unpkg

tools/check-model-routing.mjsView file

•matchType = token_shingles matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = tools/check-model-routing.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

tools/check-model-routing.mjsView on unpkg

plugins/litclaude/lib/public-source-reader/barrier-detection.mjsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = plugins/litclaude/lib/public-source-reader/barrier-detection.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/public-source-reader/barrier-detection.mjsView on unpkg

plugins/litclaude/lib/public-source-reader/guard.mjsView file

•matchType = normalized_sha256 matchedPackage = @litfamily/litclaude@1.0.0 matchedPath = plugins/litclaude/lib/public-source-reader/guard.mjs matchedIdentity = npm:QGxpdGZhbWlseS9saXRjbGF1ZGU:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/public-source-reader/guard.mjsView on unpkg

Source & flagged code

21 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/litclaude-ai.jsView file

1612case "motion-runtime": { L1613: const { main: motionRuntime } = await import(pathToFileURL(join(motionSkillScripts, "motion-runtime.mjs")).href); L1614: process.exit(await motionRuntime(parsed.rest));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/litclaude-ai.jsView on unpkg · L1612

plugins/litclaude/skills/lit-typographic-motion/engine/node/ws-server.mjsView file

Low

Weak Crypto

Package source references weak cryptographic algorithms.

plugins/litclaude/skills/lit-typographic-motion/engine/node/ws-server.mjsView on unpkg · L1

plugins/litclaude/lib/office_runtime_bootstrap.pyView file

•path = plugins/litclaude/lib/office_runtime_bootstrap.py kind = build_helper sizeBytes = 2650 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/litclaude/lib/office_runtime_bootstrap.pyView on unpkg

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView file

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = high_entropy_blob sizeBytes = 37588 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = compressed_blob sizeBytes = 37588 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = nested_archive_needs_inspection sizeBytes = 37588 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

plugins/litclaude/vendor/scientific-visualization/tests/test_figure_export.pyView file

•path = [redacted]-visualization/tests/test_figure_export.py kind = payload_in_excluded_dir sizeBytes = 1742 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/litclaude/vendor/scientific-visualization/tests/test_figure_export.pyView on unpkg

plugins/litclaude/lib/motion-render-gate.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

plugins/litclaude/lib/motion-render-gate.mjs#virtual:normalized:round1View on unpkg

plugins/litclaude/lib/automatic-update.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/automatic-update.mjsView on unpkg

bin/update-notifier.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/update-notifier.mjsView on unpkg

plugins/litclaude/skills/lsp-setup/scripts/verify-lsp.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/skills/lsp-setup/scripts/verify-lsp.tsView on unpkg

scripts/qa-negative-gate-matrix.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-negative-gate-matrix.mjsView on unpkg

scripts/qa-real-surface-behaviors.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-real-surface-behaviors.mjsView on unpkg

plugins/litclaude/skills/lit-code/scripts/typescript/check-no-excuse-rules.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/skills/lit-code/scripts/typescript/check-no-excuse-rules.tsView on unpkg

scripts/inspect-agent-tools.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/inspect-agent-tools.mjsView on unpkg

scripts/qa-installed-tamper-repair.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-installed-tamper-repair.mjsView on unpkg

tools/check-model-routing.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

tools/check-model-routing.mjsView on unpkg

plugins/litclaude/lib/public-source-reader/barrier-detection.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/public-source-reader/barrier-detection.mjsView on unpkg

plugins/litclaude/lib/public-source-reader/guard.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/public-source-reader/guard.mjsView on unpkg

Source & flagged code

21 flagged

package.jsonView file

Lines 39-79json

39 "docs/assets/readme/ignition-film.mp4",

40 "docs/assets/readme/ignition-poster.png",

41 "docs/assets/readme/ignition-readme.gif",

42 "docs/assets/readme/Lucide-LICENSE.txt",

43 "docs/assets/readme/JetBrainsMono-OFL.txt",

44 "docs/assets/litclaude-ignition-1600.webp",

45 "docs/assets/litclaude-continuity-1600.webp",

46 "docs/assets/litfamily-machines.png",

47 "LICENSE",

48 "CONTRIBUTING.md",

49 "SECURITY.md",

50 "CODE_OF_CONDUCT.md",

51 "SUPPORT.md",

52 "docs/privacy.md"

53 ],

54 "scripts": {

55 "prepublishOnly": "node scripts/prepublish-test-gate.mjs",

56 "prepack": "node tools/readme-for-npm.mjs apply",

57 "postpack": "node tools/readme-for-npm.mjs restore",

58 "check:npm-readme": "node tools/readme-for-npm.mjs check",

59 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L59

60 "test": "node --test --test-concurrency=1 --import ./test/helpers/motion-offline-prewarm.mjs test/*.test.mjs",

61 "validate:plugin": "node scripts/validate-plugin.mjs",

62 "doctor": "node scripts/doctor.mjs",

63 "qa:tmux": "bash scripts/qa-claude-plugin-smoke.sh",

64 "qa:portable": "bash scripts/qa-portable-install.sh",

65 "qa:matrix": "node scripts/qa-negative-gate-matrix.mjs",

66 "qa:matrix-negative-control": "node scripts/qa-negative-gate-matrix.mjs --negative-control",

67 "qa:tamper": "node scripts/qa-installed-tamper-repair.mjs",

68 "qa:behaviors": "node scripts/qa-real-surface-behaviors.mjs",

69 "qa:real-surface": "npm run qa:matrix && npm run qa:tamper && npm run qa:behaviors",

70 "pack:dry-run": "npm pack --dry-run",

71 "scan:legacy-tokens": "node tools/scan-legacy-tokens.mjs",

72 "check:version": "node tools/check-version-lockstep.mjs",

73 "check:model-routing": "node tools/check-model-routing.mjs",

74 "assert:ci": "node tools/assert-ci-workflow.mjs",

75 "pack:payload-guard": "node tools/check-pack-payload.mjs",

76 "gen:runtime-closures": "node tools/gen-canonical-runtime-closures.mjs",

77 "check:runtime-closures": "node tools/gen-canonical-runtime-closures.mjs --check",

78 "gen:skill-resources": "node tools/gen-canonical-skill-resources.mjs",

79 "check:skill-resources": "node tools/gen-canonical-skill-resources.mjs --check"

bin/litclaude-ai.jsView file

Lines 1592-1632javascript

1592 runClaude(parsed);

1593 break;

1594 case "litgoal":

1595 process.exit(runLitgoalCli(parsed.rest));

1596 break;

1597

plugins/litclaude/skills/lit-typographic-motion/engine/node/ws-server.mjsView file

Low

Weak Crypto

Package source references weak cryptographic algorithms.

plugins/litclaude/skills/lit-typographic-motion/engine/node/ws-server.mjsView on unpkg · L1

plugins/litclaude/lib/office_runtime_bootstrap.pyView file

•path = plugins/litclaude/lib/office_runtime_bootstrap.py kind = build_helper sizeBytes = 2650 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/litclaude/lib/office_runtime_bootstrap.pyView on unpkg

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView file

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = high_entropy_blob sizeBytes = 37588 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = compressed_blob sizeBytes = 37588 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

•path = plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docx kind = nested_archive_needs_inspection sizeBytes = 37588 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

plugins/litclaude/skills/lit-docx/templates/docx/korean-generic.docxView on unpkg

plugins/litclaude/vendor/scientific-visualization/tests/test_figure_export.pyView file

•path = [redacted]-visualization/tests/test_figure_export.py kind = payload_in_excluded_dir sizeBytes = 1742 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/litclaude/vendor/scientific-visualization/tests/test_figure_export.pyView on unpkg

plugins/litclaude/lib/motion-render-gate.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

plugins/litclaude/lib/motion-render-gate.mjs#virtual:normalized:round1View on unpkg

plugins/litclaude/lib/automatic-update.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/automatic-update.mjsView on unpkg

bin/update-notifier.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/update-notifier.mjsView on unpkg

plugins/litclaude/skills/lsp-setup/scripts/verify-lsp.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/skills/lsp-setup/scripts/verify-lsp.tsView on unpkg

scripts/qa-negative-gate-matrix.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-negative-gate-matrix.mjsView on unpkg

scripts/qa-real-surface-behaviors.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-real-surface-behaviors.mjsView on unpkg

plugins/litclaude/skills/lit-code/scripts/typescript/check-no-excuse-rules.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/skills/lit-code/scripts/typescript/check-no-excuse-rules.tsView on unpkg

scripts/inspect-agent-tools.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/inspect-agent-tools.mjsView on unpkg

scripts/qa-installed-tamper-repair.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/qa-installed-tamper-repair.mjsView on unpkg

tools/check-model-routing.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

tools/check-model-routing.mjsView on unpkg

plugins/litclaude/lib/public-source-reader/barrier-detection.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/public-source-reader/barrier-detection.mjsView on unpkg

plugins/litclaude/lib/public-source-reader/guard.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/public-source-reader/guard.mjsView on unpkg

@litfamily/litclaude@1.0.15

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code