registry / @raolin2025/claude-code-node / 2.7.1

@raolin2025/claude-code-node@2.7.1

Node.js AI Code Agent CLI - Zero dependencies, pure JavaScript, security hardened, multi-channel notifications, Telegram & QQ Bot remote programming, rich media upload, multi-account management

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 55 file(s), 413 KB of source, external domains: api.deepseek.com, api.github.com, api.search.brave.com, api.sgroup.qq.com, api.telegram.org, bots.qq.com, www.googleapis.com

Source & flagged code

7 flagged

src/tools/bash.jsView file

4*/ L5: import { spawn } from 'child_process' L6: import { existsSync } from 'node:fs'

High

Child Process

Package source references child process execution.

src/tools/bash.jsView on unpkg · L4

55// 跨平台 shell 选择： L56: // - Windows: 优先用 Git Bash（如已安装），否则用 cmd.exe /c L57: // - 其他平台: 用 SHELL 环境变量或默认 /bin/bash

High

Shell

Package source references shell execution.

src/tools/bash.jsView on unpkg · L55

src/git/pr-reviewer.jsView file

187'SELECT .* FROM': { severity: 'ERROR', message: 'Possible SQL injection if string concatenation' }, L188: 'eval(': { severity: 'CRITICAL', message: 'eval() is dangerous' }, L189: // 路径遍历

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/git/pr-reviewer.jsView on unpkg · L187

src/channel/notify-daemon.jsView file

30import { homedir } from 'node:os' L31: import { spawn, execSync } from 'node:child_process' L32: import { createConnection } from 'node:net' L33: import crypto from 'node:crypto' ... L42: // 生成或加载 API Key L43: let apiKey = process.env.CC_NOTIFY_API_KEY || '' L44: if (!apiKey) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/channel/notify-daemon.jsView on unpkg · L30

src/security/ssrf-guard.jsView file

8*/ L9: import { lookup as dnsLookup } from 'dns' L10: import { isIP } from 'net'

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/security/ssrf-guard.jsView on unpkg · L8

src/security/enhanced-permission.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. ult.reasons.join('; ') : undefined, detail: result, } } case 'webfetch': { const url = input.url || '' if (!url) return { safe: true } const result = await checkurlsafety(url) return { safe: result.allowed, reason: result.reason, } } default: return { safe: true } } } _extractpattern(toolname, input) { switch (toolname) { case 'bash': return input.command || '' case 'read': case 'edit': case 'write': return input.file_path || '' case 'glob': case 'grep':

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

src/security/enhanced-permission.jsView on unpkg

src/channel/tg-listener.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @raolin2025/claude-code-node@2.7.0 matchedIdentity = npm:[redacted]:2.7.0 similarity = 0.944 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/channel/tg-listener.jsView on unpkg

Source & flagged code

7 flagged · loading source

src/tools/bash.jsView file

4*/ L5: import { spawn } from 'child_process' L6: import { existsSync } from 'node:fs'

High

Child Process

Package source references child process execution.

src/tools/bash.jsView on unpkg · L4

55// 跨平台 shell 选择： L56: // - Windows: 优先用 Git Bash（如已安装），否则用 cmd.exe /c L57: // - 其他平台: 用 SHELL 环境变量或默认 /bin/bash

High

Shell

Package source references shell execution.

src/tools/bash.jsView on unpkg · L55

src/git/pr-reviewer.jsView file

187'SELECT .* FROM': { severity: 'ERROR', message: 'Possible SQL injection if string concatenation' }, L188: 'eval(': { severity: 'CRITICAL', message: 'eval() is dangerous' }, L189: // 路径遍历

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/git/pr-reviewer.jsView on unpkg · L187

Findings

6 High3 Medium5 Low

HighChild Processsrc/tools/bash.js

HighShellsrc/tools/bash.js

HighSame File Env Network Executionsrc/channel/notify-daemon.js

HighCloud Metadata Accesssrc/security/ssrf-guard.js

HighTrigger Reachable External Ai Agent Control Surface Mutationsrc/security/enhanced-permission.js

HighPrevious Version Dangerous Deltasrc/channel/tg-listener.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalsrc/git/pr-reviewer.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @raolin2025/claude-code-node@2.7.1.

See all versions of @raolin2025/claude-code-node for other recorded verdicts.

Review the evidence and your use of @raolin2025/claude-code-node@2.7.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-19 04:27:11.650Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.