@myclaw163/clawclaw-cli@0.8.11: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@myclaw163/clawclaw-cli@0.8.11: AI-agent control-surface risk | LPM Firewall

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/enable_ccl_permissions.cjsView file

12L13: const fs = require("fs"); L14: const os = require("os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/enable_ccl_permissions.cjsView on unpkg · L12

src/runtime/owner-control.tsView file

4import { join } from 'path'; L5: import { connect, createServer, type Server, type Socket } from 'net'; L6: import type { AuthProfile } from '../lib/auth.js'; ... L15: // owner-control requests by monkey-patching global JSON. L16: const SAFE_JSON_PARSE = JSON.parse.bind(JSON) as typeof JSON.parse; L17: const SAFE_JSON_STRINGIFY = JSON.stringify.bind(JSON) as typeof JSON.stringify; ... L106: const hash = createHash('sha1').update(stateDir).digest('hex').slice(0, 12); L107: if (process.platform === 'win32') return `\\\\.\\pipe\\clawclaw-${hash}-${pid}-${nonce}`; L108: const userId = typeof process.getuid === 'function' ? String(process.getuid()) : hash; ... L124: function sendLine(socket: import('net').Socket, value: OwnerControlResponse): void { L125: socket.end(`${SAFE_JSON_STRINGIFY(v

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/runtime/owner-control.tsView on unpkg · L4

scripts/sync-bundled-skill.mjsView file

2import { L3: cpSync, L4: existsSync, L5: mkdirSync, L6: readFileSync, ... L25: const homeDir = homedir(); L26: const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(homeDir, '.claude'); L27: const codexHome = process.env.CODEX_HOME?.trim() || join(homeDir, '.codex'); L28: return [ L29: join(homeDir, '.agents', 'skills', SKILL_NAME), L30: join(claudeHome, 'skills', SKILL_NAME), ... L77: if (existsSync(resolvedTarget)) rmSync(resolvedTarget, { recursive: true, force: true });

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/sync-bundled-skill.mjsView on unpkg · L2

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = scripts/sync-bundled-skill.mjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-bundled-skill.mjsView on unpkg

scripts/find-hide-spots.pyView file

•path = scripts/find-hide-spots.py kind = build_helper sizeBytes = 6479 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/find-hide-spots.pyView on unpkg

src/runtime/clawclaw/plugins/behavior/behavior-source.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/runtime/clawclaw/plugins/behavior/behavior-source.ts#virtual:normalized:round1View on unpkg

scripts/enable_monitor.cjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = scripts/enable_monitor.cjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/enable_monitor.cjsView on unpkg

scripts/check_monitor.cjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = scripts/check_monitor.cjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/check_monitor.cjsView on unpkg

src/commands/setup/codex.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = src/commands/setup/codex.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/setup/codex.tsView on unpkg

scripts/sync-frontend-map.mjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = scripts/sync-frontend-map.mjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-frontend-map.mjsView on unpkg

src/runtime/framework/events/sqlite-event-repository.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = [redacted]-event-repository.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/framework/events/sqlite-event-repository.tsView on unpkg

src/runtime/clawclaw/plugins/behavior/thread-behavior-executor.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = [redacted]-behavior-executor.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/behavior/thread-behavior-executor.tsView on unpkg

src/runtime/clawclaw/plugins/behavior/behavior-analysis-thread-host.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = [redacted]-analysis-thread-host.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/behavior/behavior-analysis-thread-host.tsView on unpkg

src/runtime/clawclaw/plugins/perception/perception-analysis-thread-worker.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.8.9 matchedPath = [redacted]-analysis-thread-worker.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.8.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/clawclaw/plugins/perception/perception-analysis-thread-worker.tsView on unpkg