registry / @promptctl/cc-candybar / 1.161.0
@promptctl/cc-candybar@1.161.0
Statusline renderer for Claude Code — a JSON5-configurable DSL with daemon-cached data sources, byte-clean palette-aware composition, and OSC8 click verbs.
AI Security Review
scanned 7d ago · by lpm-firewall-aiSource inspection supports normal statusline and daemon functionality; the scanner’s command-execution and network matches occur in product features and update/pricing paths, with no verified attack behavior. The reviewed platform dependency manifests have no install hooks.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Normal package invocation or an explicit user-requested install or update action.
Impact
No concrete unauthorized data collection, execution, or configuration change was established.
Mechanism
The runtime retrieves pricing or release information from package-aligned GitHub and npm endpoints; update application is a separate action. The install command preserves a customized statusline setting unless forced.
AI rationale
Source inspection supports normal statusline and daemon functionality; the scanner’s command-execution and network matches occur in product features and update/pricing paths, with no verified attack behavior. The reviewed platform dependency manifests have no install hooks.
Evidence
package.jsondist/index.mjs.lpm-dependency-evidence-95ceecc7-10d7-4718-9ded-59f67550c1d7/0/npm-linux/package.json.lpm-dependency-evidence-95ceecc7-10d7-4718-9ded-59f67550c1d7/1/npm-linux/package.json.lpm-dependency-evidence-95ceecc7-10d7-4718-9ded-59f67550c1d7/2/npm-linux/package.json
Network endpoints2
registry.npmjs.orgraw.githubusercontent.com/promptctl/cc-candybar/main/pricing.json
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points its runtime entrypoints to dist/index.mjs and contains only a prepublishOnly build and validation script.
- The release checker runs periodically, but applying an update is an explicit action; install-time execution is not established.
- The install command retrieves package version information from registry.npmjs.org and updates the statusline configuration only when it is not customized or force is requested.
- The three inspected optional platform manifests contain no lifecycle scripts and describe prebuilt native binaries.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
8 flaggeddist/index.mjsView file
9contains invisible/control Unicode U+200C (zero width non-joiner)
`:case`\r`:case`\u2028`:case`\u2029`:b(),p=`default`;return;case void 0:return b(),x(`eof`)}b()},value(){switch(_){case`{`:case`[`:return x(`punctuator`,b());case`n`:return b(),S(`ull`),x(`null`,null);case`t`:return b(),S(`rue`),x(`boolean`
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/index.mjsView on unpkg · L9480Trigger-reachable chain: scripts.start -> dist/index.mjs
L480: `)+1,a=0,o=0;for(let e of n.slice(r,i).split(`
L481: `)){let t=cK(e);t.kind!==`blank`&&(a++,t.kind===`unparsed`&&o++)}return{lines:a,unparsed:o,whole:t}}function E0(e){let t=Ya(e,tN+1);return t.kind===`ok`?F(T0(t.value.buf,t.value.fr...
L482: `)};return e.error===null?{...t,kind:`loaded`,unused:e.unused}:{...t,kind:`failed`,error:e.error}}const M0=e=>u0(()=>so(e));function N0(e,t){let n=e=>JSON.stringify([e.managedDir,e...
L483: `:null,r=q0(e.value);return r===null?{stdout:n??t2(e.value),stderr:``,code:0}:{stdout:n??``,stderr:`daemon-stats: ${r}\n`,code:1}}function K0(){return sn(()=>({kind:`stats`}),U0,e=...
...
L495: `).map(e=>e.trim().split(` `)).filter(([,e])=>e===t).map(([e])=>e)}const X6=/(^|\/)(cc-attach|bun-attach\.js)(
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjsView on unpkg · L480Findings
2 Critical4 High4 Medium7 Low
CriticalTrojan Source Unicodedist/index.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugin/bin/preview.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.mjs
Low
Affected versions and remediation
This report applies to @promptctl/cc-candybar@1.161.0.
See all versions of @promptctl/cc-candybar for other recorded verdicts.
- Review the evidence and your use of @promptctl/cc-candybar@1.161.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.