registry / @promptctl/cc-candybar / 1.183.1
@promptctl/cc-candybar@1.183.1
Statusline renderer for Claude Code — a JSON5-configurable DSL with daemon-cached data sources, byte-clean palette-aware composition, and OSC8 click verbs.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged process and network behavior aligns with the package’s Claude Code statusline, while setup is user-invoked and the only lifecycle script is release tooling. The reviewed code showed no credential theft, unrelated exfiltration, or concealed attack behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Normal CLI or statusline use; setup runs only when the user invokes install.
Impact
No unauthorized collection, account action, persistence, or concealed code execution was identified.
Mechanism
The package launches local tools for its statusline features and accesses npm release metadata and its own GitHub pricing file.
AI rationale
The flagged process and network behavior aligns with the package’s Claude Code statusline, while setup is user-invoked and the only lifecycle script is release tooling. The reviewed code showed no credential theft, unrelated exfiltration, or concealed attack behavior.
Network endpoints2
registry.npmjs.orgraw.githubusercontent.com/promptctl/cc-candybar/main/pricing.json
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs release checks and a build.
- The CLI maps install setup to an explicit install subcommand.
- The install path checks release metadata at registry.npmjs.org.
- Pricing data is fetched from the package’s own GitHub repository.
Evidence against
- The executable imports the bundle when the CLI is run; the reviewed source shows no attack on import.
- The package uses child processes and network access for its Claude Code statusline and setup features; no credential or unrelated data exfiltration was identified.
- The attach helper communicates with the Claude Code process through its local inspector; no remote control endpoint was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
11 flaggeddist/index.mjsView file
10contains invisible/control Unicode U+200C (zero width non-joiner)
`:case`\r`:case`\u2028`:case`\u2029`:b(),p=`default`;return;case void 0:return b(),S(`eof`)}b()},value(){switch(_){case`{`:case`[`:return S(`punctuator`,b());case`n`:return b(),C(`ull`),S(`null`,null);case`t`:return b(),C(`rue`),S(`boolean`
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/index.mjsView on unpkg · L10482Trigger-reachable chain: scripts.start -> dist/index.mjs
L482: `)){n.push(r);continue}let e=r.split(`
L483: `);n.push(e[0]);for(let r=1;r<e.length;r++)t.push(n),n=[e[r]]}return t.push(n),t}function L2(e){let t=new Map;return e.map(e=>{let n=`${e.place}.${e.band}`,r=t.get(n)??0;return t.s...
L484: `),c=t.kind===`running`?cU(`[${i.busy}]`,null):cU(`[${i.act}]`,_a([{verb:na,args:[n.sessionId]}])),l=[cU(a,null),c,cU(`[dismiss]`,_a([{verb:Ri,args:[n.sessionId,wz,r]}])),cU(`[disa...
L485: `),r=+!t;for(let e=n.length-1;e>=r;e--){let t=n[e];if(!t||!b5.test(t))continue;let r=x5(t);if(r!=null)return r}return null}var E5=class{bySession=Y.observable.map(void 0,{deep:!1})...
...
L493: `).flatMap(e=>{let[n,...r]=e.trim().split(` `);return Pne.exec(r.join(` `))?.[1]===t?[n]:[]})}const Ine=/(^|\/)(cc-att
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjsView on unpkg · L482•matchType = previous_version_dangerous_delta
matchedPackage = @promptctl/cc-candybar@1.183.0
matchedIdentity = npm:QHByb21wdGN0bC9jYy1jYW5keWJhcg:1.183.0
similarity = 0.933
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.mjsView on unpkg1#!/usr/bin/env node
L2: import{createRequire as e}from"node:module";import t from"node:process";import{URL as n,URLSearchParams as r,fileURLToPath as i}from"node:url";import{json as a}from"node:stream/con...
L3: `),withdraw:()=>l.end()})}function Ct(e){let t;try{t=h(e,`utf8`).trim()}catch(e){if(e.code===`ENOENT`)return null;throw e}let n=/^exit (\d+)$/.exec(t);if(n)return{kind:`exit`,code:...
High
482`)){n.push(r);continue}let e=r.split(`
L483: `);n.push(e[0]);for(let r=1;r<e.length;r++)t.push(n),n=[e[r]]}return t.push(n),t}function L2(e){let t=new Map;return e.map(e=>{let n=`${e.place}.${e.band}`,r=t.get(n)??0;return t.s...
L484: `),c=t.kind===`running`?cU(`[${i.busy}]`,null):cU(`[${i.act}]`,_a([{verb:na,args:[n.sessionId]}])),l=[cU(a,null),c,cU(`[dismiss]`,_a([{verb:Ri,args:[n.sessionId,wz,r]}])),cU(`[disa...
L485: `),r=+!t;for(let e=n.length-1;e>=r;e--){let t=n[e];if(!t||!b5.test(t))continue;let r=x5(t);if(r!=null)return r}return null}var E5=class{bySession=Y.observable.map(void 0,{deep:!1})...
...
L493: `).flatMap(e=>{let[n,...r]=e.trim().split(` `);return Pne.exec(r.join(` `))?.[1]===t?[n]:[]})}const Ine=/(^|\/)(cc-attach|bun-attach\.js)(\s|$)/;function Lne(e,t,n){for(let r
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.mjsView on unpkg · L482482Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.mjs
L482: `)){n.push(r);continue}let e=r.split(`
L483: `);n.push(e[0]);for(let r=1;r<e.length;r++)t.push(n),n=[e[r]]}return t.push(n),t}function L2(e){let t=new Map;return e.map(e=>{let n=`${e.place}.${e.band}`,r=t.get(n)??0;return t.s...
L484: `),c=t.kind===`running`?cU(`[${i.busy}]`,null):cU(`[${i.act}]`,_a([{verb:na,args:[n.sessionId]}])),l=[cU(a,null),c,cU(`[dismiss]`,_a([{verb:Ri,args:[n.sessionId,wz,r]}])),cU(`[disa...
L485: `),r=+!t;for(let e=n.length-1;e>=r;e--){let t=n[e];if(!t||!b5.test(t))continue;let r=x5(t);if(r!=null)return r}return null}var E5=class{bySession=Y.observable.map(void 0,{deep:!1})...
...
L493: `).flatMap(e=>{let[n,...r]=e.trim().split(` `);return Pne.exec(r.join(` `))?.[1]===t?[n]:[
High
Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.mjsView on unpkg · L4821#!/usr/bin/env node
L2: import{createRequire as e}from"node:module";import t from"node:process";import{URL as n,URLSearchParams as r,fileURLToPath as i}from"node:url";import{json as a}from"node:stream/con...
L3: `),withdraw:()=>l.end()})}function Ct(e){let t;try{t=h(e,`utf8`).trim()}catch(e){if(e.code===`ENOENT`)return null;throw e}let n=/^exit (\d+)$/.exec(t);if(n)return{kind:`exit`,code:...
L4: `)}function Rn(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=e,n=Dn.filter(e=>t[e]!==void 0);return n.every(e=>typeof t[e]==`string`&&t[e]!==``)?Object.fromEntries(n....
...
L40: Tip: every bar carries a settings menu — click it (${pi} by\n default) for quick actions, preset switching, edit mode, and clickable\n [redacted]...
L41: `):ws(o,n),js(s.binPath,a,r,n.host),process.std
Low
plugin/bin/preview.shView file
•path = plugin/bin/preview.sh
kind = build_helper
sizeBytes = 6874
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
plugin/bin/preview.shView on unpkgdist/attach-preload.cjsView file
•matchType = normalized_sha256
matchedPackage = @promptctl/cc-candybar@1.174.1
matchedPath = dist/attach-preload.cjs
matchedIdentity = npm:QHByb21wdGN0bC9jYy1jYW5keWJhcg:1.174.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/attach-preload.cjsView on unpkgdist/cc-extra/src/bun-attach.jsView file
•matchType = normalized_sha256
matchedPackage = @promptctl/cc-candybar@1.174.1
matchedPath = dist/cc-extra/src/bun-attach.js
matchedIdentity = npm:QHByb21wdGN0bC9jYy1jYW5keWJhcg:1.174.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cc-extra/src/bun-attach.jsView on unpkgdist/cc-extra/src/launch.jsView file
•matchType = normalized_sha256
matchedPackage = @promptctl/cc-candybar@1.174.1
matchedPath = dist/cc-extra/src/launch.js
matchedIdentity = npm:QHByb21wdGN0bC9jYy1jYW5keWJhcg:1.174.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cc-extra/src/launch.jsView on unpkgFindings
3 Critical6 High4 Medium7 Low
CriticalTrojan Source Unicodedist/index.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
CriticalPrevious Version Dangerous Deltadist/index.mjs
HighChild Processdist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
HighKnown Malware Source Similaritydist/attach-preload.cjs
HighKnown Malware Source Similaritydist/cc-extra/src/bun-attach.js
HighKnown Malware Source Similaritydist/cc-extra/src/launch.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugin/bin/preview.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.mjs
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @promptctl/cc-candybar@1.183.1.
See all versions of @promptctl/cc-candybar for other recorded verdicts.
- Review the evidence and your use of @promptctl/cc-candybar@1.183.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.