@myclaw163/clawclaw-cli: Suspicious npm security report (Warn)

Loading npm security reports…

@myclaw163/clawclaw-cli: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

19 flagged

package.jsonView file

Lines 42-82json

42 "QUICKSTART.md",

43 "QUICKSTART_OTHER.md",

44 "QUICKSTART_OPENCLAW.md",

45 "QUICKSTART_HERMES.md",

46 "docs/runtime/",

47 "docs/desktop-event-push.md",

48 "docs/configuration.md",

49 "docs/custom-modules/"

50 ],

51 "scripts": {

52 "typecheck": "tsc --noEmit",

53 "test": "vitest run --maxWorkers=8",

54 "test:watch": "vitest",

55 "sync:frontend-map": "node scripts/sync-frontend-map.mjs",

56 "check:frontend-map": "node scripts/sync-frontend-map.mjs --check",

57 "replay:perception": "tsx scripts/replay-perception.ts",

58 "compare:perception": "tsx scripts/compare-perception-replays.ts",

59 "watch:perception": "tsx scripts/watch-perception-events.ts",

60 "prepack": "node scripts/package-readme.mjs prepare",

61 "postpack": "node scripts/package-readme.mjs restore",

62 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L62

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L62

63 "release:patch": "npm version patch && npm publish --registry https://registry.npmjs.org --access public",

64 "release:minor": "npm version minor && npm publish --registry https://registry.npmjs.org --access public",

65 "release:major": "npm version major && npm publish --registry https://registry.npmjs.org --access public"

66 },

67 "dependencies": {

68 "@modelcontextprotocol/sdk": "^1.30.0",

69 "amaro": "^1.1.11",

70 "commander": "^12.0.0",

71 "skills": "1.5.1",

72 "tsx": "^4.23.12",

73 "undici": "^6.28.0",

74 "ws": "^8.21.3"

75 },

76 "devDependencies": {

77 "@types/node": "^22.20.1",

78 "@types/ws": "^8.5.10",

79 "esbuild": "^0.28.2",

80 "typescript": "^5.4.0",

81 "vitest": "^3.1.0"

82 }

scripts/enable_ccl_permissions.cjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * Add ClawClaw gameplay permissions to Claude Code's permissions.allow list.

4 *

5 * This script intentionally only edits ~/.claude/settings.json permissions.allow.

6 * It does not back up, revert, remove, or rewrite any other settings.

7 *

8 * Usage:

9 * node enable_ccl_permissions.cjs

10 * node enable_ccl_permissions.cjs --dry-run

src/runtime/clawclaw/plugins/mailbox/adapters/game-sync-perception-report-adapter.tsView file

Lines 1-29typescript

1import { createHash } from 'node:crypto';

2import type { GameSyncPerceptionReport } from '../../../../game-sync-protocol.js';

3import type { CanonicalEvent } from '../../../../framework/events/index.js';

scripts/sync-bundled-skill.mjsView file

Lines 1-21javascript

1import {

2 cpSync,

3 existsSync,

4 mkdirSync,

5 readFileSync,

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/sync-bundled-skill.mjsView on unpkg · L1

6 renameSync,

7 rmSync,

8} from

scripts/find-hide-spots.pyView file

•path = scripts/find-hide-spots.py kind = build_helper sizeBytes = 6479 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/find-hide-spots.pyView on unpkg

src/runtime/clawclaw/plugins/behavior/behavior-source.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/runtime/clawclaw/plugins/behavior/behavior-source.ts#virtual:normalized:round1View on unpkg

scripts/enable_monitor.cjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = scripts/enable_monitor.cjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/enable_monitor.cjsView on unpkg

scripts/check_monitor.cjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = scripts/check_monitor.cjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/check_monitor.cjsView on unpkg

src/commands/setup/codex.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = src/commands/setup/codex.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/setup/codex.tsView on unpkg

scripts/sync-frontend-map.mjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = scripts/sync-frontend-map.mjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-frontend-map.mjsView on unpkg

src/runtime/framework/events/sqlite-event-repository.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = [redacted]-event-repository.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/framework/events/sqlite-event-repository.tsView on unpkg

src/lib/capability-cloud-sync.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = src/lib/capability-cloud-sync.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/capability-cloud-sync.tsView on unpkg

src/runtime/clawclaw/plugins/behavior/thread-behavior-executor.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = [redacted]-behavior-executor.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/behavior/thread-behavior-executor.tsView on unpkg

src/runtime/clawclaw/plugins/behavior/behavior-analysis-thread-host.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = [redacted]-analysis-thread-host.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/behavior/behavior-analysis-thread-host.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-analysis-thread-worker.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = [redacted]-analysis-thread-worker.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-analysis-thread-worker.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-pool.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = [redacted]-reducer-thread-pool.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-pool.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-worker.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = [redacted]-reducer-thread-worker.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-worker.tsView on unpkg

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/enable_ccl_permissions.cjsView file

12L13: const fs = require("fs"); L14: const os = require("os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/enable_ccl_permissions.cjsView on unpkg · L12

src/runtime/clawclaw/plugins/mailbox/adapters/game-sync-perception-report-adapter.tsView file

9const GAME_SYNC_PERCEPTION_REPORT_BATCH_SIZE = 20; L10: const PERCEPTION_REPORT_UUID_NAMESPACE = Buffer.from( L11: '[redacted]', ... L57: L58: private stopped = false; L59: private sessionId?: string; ... L101: const batch = reports.slice(index, index + GAME_SYNC_PERCEPTION_REPORT_BATCH_SIZE); L102: if (!this.options.send(batch)) { L103: this.options.diagnostic?.('runtime.mailbox.perception_report_dropped', {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/runtime/clawclaw/plugins/mailbox/adapters/game-sync-perception-report-adapter.tsView on unpkg · L9

scripts/sync-bundled-skill.mjsView file

1import { L2: cpSync, L3: existsSync, L4: mkdirSync, L5: readFileSync, ... L27: const homeDir = homedir(); L28: const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(homeDir, '.claude'); L29: const codexHome = process.env.CODEX_HOME?.trim() || join(homeDir, '.codex'); L30: return [ L31: join(homeDir, '.agents', 'skills', SKILL_NAME), L32: join(claudeHome, 'skills', SKILL_NAME), ... L42: try {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/sync-bundled-skill.mjsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.33 matchedPath = scripts/sync-bundled-skill.mjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.33 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-bundled-skill.mjsView on unpkg

scripts/find-hide-spots.pyView file

•path = scripts/find-hide-spots.py kind = build_helper sizeBytes = 6479 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/find-hide-spots.pyView on unpkg

src/runtime/clawclaw/plugins/behavior/behavior-source.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/runtime/clawclaw/plugins/behavior/behavior-source.ts#virtual:normalized:round1View on unpkg

scripts/enable_monitor.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/enable_monitor.cjsView on unpkg

scripts/check_monitor.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/check_monitor.cjsView on unpkg

src/commands/setup/codex.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/setup/codex.tsView on unpkg

scripts/sync-frontend-map.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-frontend-map.mjsView on unpkg

src/runtime/framework/events/sqlite-event-repository.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/framework/events/sqlite-event-repository.tsView on unpkg

src/lib/capability-cloud-sync.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/capability-cloud-sync.tsView on unpkg

src/runtime/clawclaw/plugins/behavior/thread-behavior-executor.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/behavior/thread-behavior-executor.tsView on unpkg

src/runtime/clawclaw/plugins/behavior/behavior-analysis-thread-host.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/behavior/behavior-analysis-thread-host.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-analysis-thread-worker.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-analysis-thread-worker.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-pool.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-pool.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-worker.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-worker.tsView on unpkg

Source & flagged code

19 flagged

package.jsonView file

Lines 42-82json

42 "QUICKSTART.md",

43 "QUICKSTART_OTHER.md",

44 "QUICKSTART_OPENCLAW.md",

45 "QUICKSTART_HERMES.md",

46 "docs/runtime/",

47 "docs/desktop-event-push.md",

48 "docs/configuration.md",

49 "docs/custom-modules/"

50 ],

51 "scripts": {

52 "typecheck": "tsc --noEmit",

53 "test": "vitest run --maxWorkers=8",

54 "test:watch": "vitest",

55 "sync:frontend-map": "node scripts/sync-frontend-map.mjs",

56 "check:frontend-map": "node scripts/sync-frontend-map.mjs --check",

57 "replay:perception": "tsx scripts/replay-perception.ts",

58 "compare:perception": "tsx scripts/compare-perception-replays.ts",

59 "watch:perception": "tsx scripts/watch-perception-events.ts",

60 "prepack": "node scripts/package-readme.mjs prepare",

61 "postpack": "node scripts/package-readme.mjs restore",

62 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L62

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L62

63 "release:patch": "npm version patch && npm publish --registry https://registry.npmjs.org --access public",

64 "release:minor": "npm version minor && npm publish --registry https://registry.npmjs.org --access public",

65 "release:major": "npm version major && npm publish --registry https://registry.npmjs.org --access public"

66 },

67 "dependencies": {

68 "@modelcontextprotocol/sdk": "^1.30.0",

69 "amaro": "^1.1.11",

70 "commander": "^12.0.0",

71 "skills": "1.5.1",

72 "tsx": "^4.23.12",

73 "undici": "^6.28.0",

74 "ws": "^8.21.3"

75 },

76 "devDependencies": {

77 "@types/node": "^22.20.1",

78 "@types/ws": "^8.5.10",

79 "esbuild": "^0.28.2",

80 "typescript": "^5.4.0",

81 "vitest": "^3.1.0"

82 }

scripts/enable_ccl_permissions.cjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * Add ClawClaw gameplay permissions to Claude Code's permissions.allow list.

4 *

5 * This script intentionally only edits ~/.claude/settings.json permissions.allow.

6 * It does not back up, revert, remove, or rewrite any other settings.

7 *

8 * Usage:

9 * node enable_ccl_permissions.cjs

10 * node enable_ccl_permissions.cjs --dry-run

src/runtime/clawclaw/plugins/mailbox/adapters/game-sync-perception-report-adapter.tsView file

Lines 1-29typescript

1import { createHash } from 'node:crypto';

2import type { GameSyncPerceptionReport } from '../../../../game-sync-protocol.js';

3import type { CanonicalEvent } from '../../../../framework/events/index.js';

scripts/sync-bundled-skill.mjsView file

Lines 1-21javascript

1import {

2 cpSync,

3 existsSync,

4 mkdirSync,

5 readFileSync,

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/sync-bundled-skill.mjsView on unpkg · L1

6 renameSync,

7 rmSync,

8} from

scripts/find-hide-spots.pyView file

•path = scripts/find-hide-spots.py kind = build_helper sizeBytes = 6479 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/find-hide-spots.pyView on unpkg

src/runtime/clawclaw/plugins/behavior/behavior-source.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/runtime/clawclaw/plugins/behavior/behavior-source.ts#virtual:normalized:round1View on unpkg

scripts/enable_monitor.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/enable_monitor.cjsView on unpkg

scripts/check_monitor.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/check_monitor.cjsView on unpkg

src/commands/setup/codex.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/setup/codex.tsView on unpkg

scripts/sync-frontend-map.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-frontend-map.mjsView on unpkg

src/runtime/framework/events/sqlite-event-repository.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/framework/events/sqlite-event-repository.tsView on unpkg

src/lib/capability-cloud-sync.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/capability-cloud-sync.tsView on unpkg

src/runtime/clawclaw/plugins/behavior/thread-behavior-executor.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/behavior/thread-behavior-executor.tsView on unpkg

src/runtime/clawclaw/plugins/behavior/behavior-analysis-thread-host.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/behavior/behavior-analysis-thread-host.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-analysis-thread-worker.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-analysis-thread-worker.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-pool.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-pool.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-worker.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-reducer-thread-worker.tsView on unpkg

@myclaw163/clawclaw-cli@0.8.34

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code