registry / @promptctl/cc-candybar / 1.165.1
@promptctl/cc-candybar@1.165.1
Statusline renderer for Claude Code — a JSON5-configurable DSL with daemon-cached data sources, byte-clean palette-aware composition, and OSC8 click verbs.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install-time hook, and the inspected CLI paths use local project data for statusline features and package-owned endpoints for registry and pricing information. I found no credential exfiltration, unrelated collector, or concealed automatic behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Statusline invocation by Claude Code starts rendering; setup and other operations require an explicit CLI subcommand.
Impact
The inspected behavior supports the package's statusline, setup, and pricing features; no automatic credential or project-data exfiltration was found.
Mechanism
Processes hook input, reads local project state, and runs related local tools. Setup writes the statusline setting; observed network requests are for npm registry information and the package's pricing data.
AI rationale
The manifest has no install-time hook, and the inspected CLI paths use local project data for statusline features and package-owned endpoints for registry and pricing information. I found no credential exfiltration, unrelated collector, or concealed automatic behavior.
Evidence
Claude Code settings.json (path resolved from the user's configuration)cc-candybar state and cache under XDG or home-directory paths
Network endpoints2
registry.npmjs.orgraw.githubusercontent.com/promptctl/cc-candybar/main/pricing.json
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and declares no preinstall, install, or postinstall hook; its prepublishOnly script is for checks and building.
- The bin entry imports the package bundle as its CLI entry point.
- The install subcommand checks the npm registry after setup; the bundle also updates the Claude Code statusline setting, skipping a customized setting unless forced.
- The CLI dispatches explicit subcommands or processes statusline input from stdin.
Evidence against
- The bundle uses filesystem, environment, and child-process APIs, but the inspected code ties them to configuration, local daemon state, and project-status features.
- Network references found point to registry.npmjs.org and the package's GitHub pricing file; no credential transfer to an unrelated host was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
9 flaggeddist/index.mjsView file
10contains invisible/control Unicode U+200C (zero width non-joiner)
`:case`\r`:case`\u2028`:case`\u2029`:b(),p=`default`;return;case void 0:return b(),x(`eof`)}b()},value(){switch(_){case`{`:case`[`:return x(`punctuator`,b());case`n`:return b(),S(`ull`),x(`null`,null);case`t`:return b(),S(`rue`),x(`boolean`
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/index.mjsView on unpkg · L10483Trigger-reachable chain: scripts.start -> dist/index.mjs
L483: `)+1,a=0,o=0;for(let e of n.slice(r,i).split(`
L484: `)){let t=Lq(e);t.kind!==`blank`&&(a++,t.kind===`unparsed`&&o++)}return{lines:a,unparsed:o,whole:t}}function g4(e){let t=go(e,wP+1);return t.kind===`ok`?P(h4(t.value.buf,t.value.fr...
L485: `)};return e.error===null?{...t,kind:`loaded`,unused:e.unused}:{...t,kind:`failed`,error:e.error}}const S4=e=>e4(()=>Oo(e));function C4(e,t){let n=e=>JSON.stringify([e.managedDir,e...
L486: `:null,r=L4(e.value);return r===null?{stdout:n??G4(e.value),stderr:``,code:0}:{stdout:n??``,stderr:`daemon-stats: ${r}\n`,code:1}}function I4(){return M(()=>({kind:`stats`}),N4,e=>...
...
L498: `).map(e=>e.trim().split(` `)).filter(([,e])=>e===t).map(([e])=>e)}const z5=/(^|\/)(cc-attach|bun-attach\.js)(
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjsView on unpkg · L483Findings
3 Critical4 High4 Medium7 Low
CriticalTrojan Source Unicodedist/index.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
CriticalPrevious Version Dangerous Deltadist/index.mjs
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugin/bin/preview.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @promptctl/cc-candybar@1.165.1.
See all versions of @promptctl/cc-candybar for other recorded verdicts.
- Review the evidence and your use of @promptctl/cc-candybar@1.165.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.