registry / @promptctl/cc-candybar / 1.186.0
@promptctl/cc-candybar@1.186.0
Statusline renderer for Claude Code — a JSON5-configurable DSL with daemon-cached data sources, byte-clean palette-aware composition, and OSC8 click verbs.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package presents itself as a Claude Code statusline tool, and the inspected entry point follows that purpose. Child-process use and the GitHub pricing request fit the CLI’s functionality; I found no concrete credential theft, unrelated data exfiltration or concealed automatic behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; setup actions require their corresponding subcommand. Pricing data is fetched when that feature needs fresh pricing.
Impact
No malicious impact identified from the inspected source.
Mechanism
The inspected process execution supports package CLI behavior, and the identified network request retrieves pricing data from the project’s GitHub repository.
AI rationale
The package presents itself as a Claude Code statusline tool, and the inspected entry point follows that purpose. Child-process use and the GitHub pricing request fit the CLI’s functionality; I found no concrete credential theft, unrelated data exfiltration or concealed automatic behavior.
Evidence
package.jsonbin/cc-candybardist/index.mjs
Network endpoints1
raw.githubusercontent.com/promptctl/cc-candybar/main/pricing.json
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to a CLI bundle and declares only a prepublishOnly script, which builds and checks the package.
- The bin wrapper dynamically imports the package’s own dist/index.mjs entry point.
- The CLI dispatches setup actions such as install and install-url-handler only when those subcommands are supplied; otherwise it processes Claude Code statusline input.
- The identified external endpoint is the project’s GitHub pricing.json file, fetched by the pricing-data feature.
Evidence against
- The bundle includes child-process execution, but the inspected paths use it for CLI and statusline operations; no unrelated command-output exfiltration flow was identified.
- The scanner’s bidi-control lead was not confirmed: searches found no bidi controls in dist/index.mjs; the BOM match appears in a character-handling expression.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
11 flaggeddist/index.mjsView file
10contains invisible/control Unicode U+200C (zero width non-joiner)
`:case`\r`:case`\u2028`:case`\u2029`:b(),p=`default`;return;case void 0:return b(),S(`eof`)}b()},value(){switch(_){case`{`:case`[`:return S(`punctuator`,b());case`n`:return b(),C(`ull`),S(`null`,null);case`t`:return b(),C(`rue`),S(`boolean`
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/index.mjsView on unpkg · L10482Trigger-reachable chain: scripts.start -> dist/index.mjs
L482: `)){n.push(r);continue}let e=r.split(`
L483: `);n.push(e[0]);for(let r=1;r<e.length;r++)t.push(n),n=[e[r]]}return t.push(n),t}function F2(e){let t=new Map;return e.map(e=>{let n=`${e.place}.${e.band}`,r=t.get(n)??0;return t.s...
L484: `),c=t.kind===`running`?rU(`[${i.busy}]`,null):rU(`[${i.act}]`,xa([{verb:ra,args:[n.sessionId]}])),l=[rU(a,null),c,rU(`[dismiss]`,xa([{verb:zi,args:[n.sessionId,bz,r]}])),rU(`[disa...
L485: `),r=+!t;for(let e=n.length-1;e>=r;e--){let t=n[e];if(!t||!w5.test(t))continue;let r=T5(t);if(r!=null)return r}return null}const A5=e=>KV(e),j5=e=>E.join(e.storage.folder,A5(e.sess...
...
L493: `).flatMap(e=>{let[n,...r]=e.trim().split(` `);return Qne.exec(r.join(` `))?.[1]===t?[n]:[]})}const ere=/(^|\/)(cc-att
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjsView on unpkg · L482Findings
3 Critical6 High4 Medium7 Low
CriticalTrojan Source Unicodedist/index.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
CriticalPrevious Version Dangerous Deltadist/index.mjs
HighChild Processdist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
HighKnown Malware Source Similaritydist/attach-preload.cjs
HighKnown Malware Source Similaritydist/cc-extra/src/bun-attach.js
HighKnown Malware Source Similaritydist/cc-extra/src/launch.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugin/bin/preview.sh
Affected versions and remediation
This report applies to @promptctl/cc-candybar@1.186.0.
See all versions of @promptctl/cc-candybar for other recorded verdicts.
- Review the evidence and your use of @promptctl/cc-candybar@1.186.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.