registry / @promptctl/cc-candybar / 1.156.1
@promptctl/cc-candybar@1.156.1
⚠ Under reviewStatusline renderer for Claude Code — a JSON5-configurable DSL with daemon-cached data sources, byte-clean palette-aware composition, and OSC8 click verbs.
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe manifest and launcher establish that the unreadable dist/index.mjs is an active runtime entrypoint. Its host analysis could not determine its behavior, so the source does not support a clean or malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Importing the package or invoking its cc-candybar command loads dist/index.mjs.
Impact
A malicious behavior cannot be confirmed or ruled out from the inspected source.
Mechanism
The command dynamically imports the unresolved runtime artifact; available inspection could not establish what it does.
AI rationale
The manifest and launcher establish that the unreadable dist/index.mjs is an active runtime entrypoint. Its host analysis could not determine its behavior, so the source does not support a clean or malicious verdict.
Evidence
dist/index.mjs.lpm-inspection-xdtYp0/0-a149d7309895.txtpackage.jsonbin/cc-candybar
Decision evidence
public snapshotAI called this Manual Review at 98.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json selects dist/index.mjs as the main and bin runtime target.
- The shipped command dynamically imports dist/index.mjs.
- The host analysis identifies dist/index.mjs as an unrecognized artifact and leaves its behavior unresolved.
Evidence against
- The manifest’s prepublishOnly script runs release checks and a build; it is not an install hook.
- An inspected optional platform package manifest describes a prebuilt native render-path binary and declares no lifecycle scripts.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
10 flaggeddist/index.mjsView file
1#!/usr/bin/env node
L2: import{createRequire as e}from"node:module";import t from"node:process";import{URL as n,URLSearchParams as r,fileURLToPath as i,pathToFileURL as a}from"node:url";import{json as o}f...
L3: `)}function Wt(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=e,n=Mt.filter(e=>t[e]!==void 0);return n.every(e=>Gt(t[e])!==void 0)?Object.fromEntries(n.map(e=>[e,t[e]]...
L4: `)}const Sn=`/usr/bin/footprint`;function Cn(e,t){return e===`darwin`?[En(Sn,[`-p`,String(t)]),En(`/usr/bin/vmmap`,[`--summary`,String(t)])]:e===`linux`?[Dn(`/proc/self/smaps_rollu...
L5: `).map(e=>e.trim()).find(e=>e.length>0);return t===void 0?``:` (${t})`}const kn=`CC_CANDYBAR_RSS_LIMIT_MB`;function An(e){let t=e[kn];if(t===void 0)return 512;let n=/^\d+$/.test(t)...
L6: `)}catch(e){t.stderr
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.mjsView on unpkg · L19contains invisible/control Unicode U+200C (zero width non-joiner)
`:case`\r`:case`\u2028`:case`\u2029`:b(),p=`default`;return;case void 0:return b(),x(`eof`)}b()},value(){switch(_){case`{`:case`[`:return x(`punctuator`,b());case`n`:return b(),S(`ull`),x(`null`,null);case`t`:return b(),S(`rue`),x(`boolean`
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/index.mjsView on unpkg · L91Trigger-reachable chain: scripts.start -> dist/index.mjs
L1: #!/usr/bin/env node
L2: import{createRequire as e}from"node:module";import t from"node:process";import{URL as n,URLSearchParams as r,fileURLToPath as i,pathToFileURL as a}from"node:url";import{json as o}f...
L3: `)}function Wt(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=e,n=Mt.filter(e=>t[e]!==void 0);return n.every(e=>Gt(t[e])!==void 0)?Object.fromEntries(n.map(e=>[e,t[e]]...
L4: `)}const Sn=`/usr/bin/footprint`;function Cn(e,t){return e===`darwin`?[En(Sn,[`-p`,String(t)]),En(`/usr/bin/vmmap`,[`--summary`,String(t)])]:e===`linux`?[Dn(`/proc/self/smaps_rollu...
L5: `).map(e=>e.trim()).find(e=>e.length>0);return t===void 0?``:` (${t})`}const kn=`CC_CANDYBAR_RSS_LIMIT_MB`;function An(e){let t=e[kn];if(t===void 0)ret
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjsView on unpkg · L11#!/usr/bin/env node
L2: import{createRequire as e}from"node:module";import t from"node:process";import{URL as n,URLSearchParams as r,fileURLToPath as i,pathToFileURL as a}from"node:url";import{json as o}f...
L3: `)}function Wt(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=e,n=Mt.filter(e=>t[e]!==void 0);return n.every(e=>Gt(t[e])!==void 0)?Object.fromEntries(n.map(e=>[e,t[e]]...
High
490`)+1,a=0,o=0;for(let e of n.slice(r,i).split(`
L491: `)){let t=PH(e);t.kind!==`blank`&&(a++,t.kind===`unparsed`&&o++)}return{lines:a,unparsed:o,whole:t}}function _X(e){let t=va(e,Oj+1);return t.kind===`ok`?F(gX(t.value.buf,t.value.fr...
L492: `)};return e.error===null?{...t,kind:`loaded`,unused:e.unused}:{...t,kind:`failed`,error:e.error}}const CX=e=>tX(()=>ja(e));function wX(e,t){let n=e=>JSON.stringify([e.managedDir,e...
...
L505: `).map(e=>e.trim().split(` `)).filter(([,e])=>e===t).map(([e])=>e)}const j1=/(^|\/)(cc-attach|bun-attach\.js)(\s|$)/;function M1(e,t,n){for(let r of oY(aY(e),t)){if(r.command.split...
L506: `);async function P1(e){if(process.platform===`linux`)return{executable:await p.promises.readlink(`/proc/${e}/exe`),argv:(await p.promises.readFile(`/proc/${e}/cmdline
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.mjsView on unpkg · L490490`)+1,a=0,o=0;for(let e of n.slice(r,i).split(`
L491: `)){let t=PH(e);t.kind!==`blank`&&(a++,t.kind===`unparsed`&&o++)}return{lines:a,unparsed:o,whole:t}}function _X(e){let t=va(e,Oj+1);return t.kind===`ok`?F(gX(t.value.buf,t.value.fr...
L492: `)};return e.error===null?{...t,kind:`loaded`,unused:e.unused}:{...t,kind:`failed`,error:e.error}}const CX=e=>tX(()=>ja(e));function wX(e,t){let n=e=>JSON.stringify([e.managedDir,e...
L493: `);let i=LX(r.value);if(i!==null){t.stderr.write(`daemon-stats: ${i}\n`),t.exitCode=1;return}n||t.stdout.write(GX(r.value))}function IX(){return nn({kind:`stats`},PX,e=>`stats`in e...
...
L505: `).map(e=>e.trim().split(` `)).filter(([,e])=>e===t).map(([e])=>e)}const j1=/(^|\/)(cc-attach|bun-attach\.js)(\s|$)/;function M1(e,t,n){for(let r of oY(aY(e),t)){if(r.
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.mjsView on unpkg · L4901Trigger-reachable credential exfiltration chain: scripts.start -> dist/index.mjs
L1: #!/usr/bin/env node
L2: import{createRequire as e}from"node:module";import t from"node:process";import{URL as n,URLSearchParams as r,fileURLToPath as i,pathToFileURL as a}from"node:url";import{json as o}f...
L3: `)}function Wt(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=e,n=Mt.filter(e=>t[e]!==void 0);return n.every(e=>Gt(t[e])!==void 0)?Object.fromEntries(n.map(e=>[e,t[e]]...
L4: `)}const Sn=`/usr/bin/footprint`;function Cn(e,t){return e===`darwin`?[En(Sn,[`-p`,String(t)]),En(`/usr/bin/vmmap`,[`--summary`,String(t)])]:e===`linux`?[Dn(`/proc/self/smaps_rollu...
L5: `).map(e=>e.trim()).find(e=>e.length>0);return t===void 0?``:` (${t})`}const kn=`CC_CANDYBAR_RSS_LIMIT_MB`;function An(e){let t
High
Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/index.mjsView on unpkg · L1490Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.mjs
L490: `)+1,a=0,o=0;for(let e of n.slice(r,i).split(`
L491: `)){let t=PH(e);t.kind!==`blank`&&(a++,t.kind===`unparsed`&&o++)}return{lines:a,unparsed:o,whole:t}}function _X(e){let t=va(e,Oj+1);return t.kind===`ok`?F(gX(t.value.buf,t.value.fr...
L492: `)};return e.error===null?{...t,kind:`loaded`,unused:e.unused}:{...t,kind:`failed`,error:e.error}}const CX=e=>tX(()=>ja(e));function wX(e,t){let n=e=>JSON.stringify([e.managedDir,e...
L493: `);let i=LX(r.value);if(i!==null){t.stderr.write(`daemon-stats: ${i}\n`),t.exitCode=1;return}n||t.stdout.write(GX(r.value))}function IX(){return nn({kind:`stats`},PX,e=>`stats`in e...
...
L505: `).map(e=>e.trim().split(` `)).filter(([,e])=>e===t).map(([e])=>e)}const j1=/(^|\/
High
Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.mjsView on unpkg · L4901#!/usr/bin/env node
L2: import{createRequire as e}from"node:module";import t from"node:process";import{URL as n,URLSearchParams as r,fileURLToPath as i,pathToFileURL as a}from"node:url";import{json as o}f...
L3: `)}function Wt(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=e,n=Mt.filter(e=>t[e]!==void 0);return n.every(e=>Gt(t[e])!==void 0)?Object.fromEntries(n.map(e=>[e,t[e]]...
L4: `)}const Sn=`/usr/bin/footprint`;function Cn(e,t){return e===`darwin`?[En(Sn,[`-p`,String(t)]),En(`/usr/bin/vmmap`,[`--summary`,String(t)])]:e===`linux`?[Dn(`/proc/self/smaps_rollu...
L5: `).map(e=>e.trim()).find(e=>e.length>0);return t===void 0?``:` (${t})`}const kn=`CC_CANDYBAR_RSS_LIMIT_MB`;function An(e){let t=e[kn];if(t===void 0)return 512;let n=/^\d+$/.test(t)...
L6: `)}catch(e){t.stderr
Low
plugin/bin/preview.shView file
•path = plugin/bin/preview.sh
kind = build_helper
sizeBytes = 6874
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
plugin/bin/preview.shView on unpkgFindings
3 Critical5 High4 Medium7 Low
CriticalCredential Exfiltrationdist/index.mjs
CriticalTrojan Source Unicodedist/index.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Credential Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugin/bin/preview.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.mjs
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @promptctl/cc-candybar@1.156.1.
See all versions of @promptctl/cc-candybar for other recorded verdicts.
- Review the evidence and your use of @promptctl/cc-candybar@1.156.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.