registry / @promptctl/cc-candybar / 1.189.0
@promptctl/cc-candybar@1.189.0
Statusline renderer for Claude Code — a JSON5-configurable DSL with daemon-cached data sources, byte-clean palette-aware composition, and OSC8 click verbs.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe manifest identifies a Claude Code statusline tool, has no install-time hook, and routes use through its CLI. The flagged process and inspector behavior serves the described integration; the inspected source did not establish concealed exfiltration or other attack behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; attach setup is exposed through the explicit `cc-candybar install` command.
Impact
No unauthorized collection, unrelated account action, or concealed harmful behavior was established from the inspected source.
Mechanism
The CLI launches local tools and can use Bun’s inspector to apply breakpoint actions in Claude Code when attach mode is installed.
AI rationale
The manifest identifies a Claude Code statusline tool, has no install-time hook, and routes use through its CLI. The flagged process and inspector behavior serves the described integration; the inspected source did not establish concealed exfiltration or other attack behavior.
Evidence
~/.claude/settings.json
Network endpoints2
registry.npmjs.orgraw.githubusercontent.com/promptctl/cc-candybar
Decision evidence
public snapshotAI called this Clean at 83.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes the package as a Claude Code statusline renderer and exposes a CLI entry point.
- The CLI entry point dynamically imports the bundle; the manifest has no preinstall, install, or postinstall hook.
- The attach helper describes starting the shipped Claude binary under Bun and applying configured breakpoint seams; the bundle presents setup as an explicit `cc-candybar install` command.
Evidence against
- The package uses child processes and network requests for its CLI features, including release and pricing lookups.
- The attach helper uses Bun’s inspector to evaluate breakpoint actions in Claude Code, a powerful capability when the user opts into that mode.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
11 flaggeddist/index.mjsView file
10contains invisible/control Unicode U+200C (zero width non-joiner)
`:case`\r`:case`\u2028`:case`\u2029`:b(),p=`default`;return;case void 0:return b(),S(`eof`)}b()},value(){switch(_){case`{`:case`[`:return S(`punctuator`,b());case`n`:return b(),C(`ull`),S(`null`,null);case`t`:return b(),C(`rue`),S(`boolean`
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/index.mjsView on unpkg · L10482Trigger-reachable chain: scripts.start -> dist/index.mjs
L482: `)){n.push(r);continue}let e=r.split(`
L483: `);n.push(e[0]);for(let r=1;r<e.length;r++)t.push(n),n=[e[r]]}return t.push(n),t}function Y2(e){let t=new Map;return e.map(e=>{let n=`${e.place}.${e.band}`,r=t.get(n)??0;return t.s...
L484: `),c=t.kind===`running`?yU(`[${i.busy}]`,null):yU(`[${i.act}]`,wa([{verb:ca,args:[n.sessionId]}])),l=[yU(a,null),c,yU(`[dismiss]`,wa([{verb:Wi,args:[n.sessionId,Iz,r]}])),yU(`[disa...
L485: `),r=+!t;for(let e=n.length-1;e>=r;e--){let t=n[e];if(!t||!k5.test(t))continue;let r=A5(t);if(r!=null)return r}return null}const F5=e=>cH(e),I5=e=>E.join(e.storage.folder,F5(e.sess...
...
L493: `).flatMap(e=>{let[n,...r]=e.trim().split(` `);return gre.exec(r.join(` `))?.[1]===t?[n]:[]})}const vre=/(^|\/)(cc-att
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjsView on unpkg · L482Findings
3 Critical6 High4 Medium7 Low
CriticalTrojan Source Unicodedist/index.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
CriticalPrevious Version Dangerous Deltadist/index.mjs
HighChild Processdist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
HighKnown Malware Source Similaritydist/attach-preload.cjs
HighKnown Malware Source Similaritydist/cc-extra/src/bun-attach.js
HighKnown Malware Source Similaritydist/cc-extra/src/launch.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugin/bin/preview.sh
Affected versions and remediation
This report applies to @promptctl/cc-candybar@1.189.0.
See all versions of @promptctl/cc-candybar for other recorded verdicts.
- Review the evidence and your use of @promptctl/cc-candybar@1.189.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.