registry / @threadbase-sh/streamer / 1.25.0

@threadbase-sh/streamer@1.25.0

PTY session management, WebSocket streaming, and REST API server for Claude Code conversations

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Direct execution of `dist/seed-claude-config.cjs` with `CLAUDE_CONFIG` set.

Impact

Can suppress Claude trust/onboarding prompts for `/data/.claude/projects` in the selected configuration.

Mechanism

Explicit Claude configuration trust-state mutation

Rationale

No concrete install-time malware, exfiltration, or remote payload chain was found. The directly executable helper nevertheless changes a foreign AI-agent trust control surface, so it warrants a non-blocking warning under the stated policy.

Evidence

package.jsondist/seed-claude-config.cjsdist/index.cjsdist/cli.cjsdist/launchd-entry.cjs

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`dist/seed-claude-config.cjs` writes a Claude config path supplied by `CLAUDE_CONFIG`.
That helper sets `hasTrustDialogAccepted` and trusts `/data/.claude/projects`.
It also records the suffix of `CLAUDE_API_KEY` as an approved custom-key response.
The helper runs when directly invoked, not through an npm lifecycle hook.

Evidence against

`package.json` postinstall only chmods node-pty's platform spawn helper.
The declared preinstall targets missing `scripts/check-native-abi.mjs`; it cannot execute a hidden packaged payload.
No lifecycle script invokes `dist/seed-claude-config.cjs`.
`dist/index.cjs` PTY spawning targets Claude/Codex for the advertised session-streaming service.
No credential-exfiltration endpoint or remote dynamic-code loader was found in package-owned code.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 1.43 MB of source, external domains: github.com, json-schema.org

Oversized source lightweight scan

dist/cli.cjs6.85 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsCryptoHighEntropyStrings

Source & flagged code

8 flagged

package.jsonView file

Lines 31-80json

31 "exports": {

32 ".": {

33 "types": "./dist/index.d.ts",

34 "import": "./dist/index.js",

35 "require": "./dist/index.cjs"

36 }

37 },

38 "files": [

39 "dist"

40 ],

41 "publishConfig": {

42 "access": "public"

43 },

44 "engines": {

45 "node": ">=18"

46 },

47 "scripts": {

48 "build": "tsup && node -e \"const{cpSync}=require('fs');cpSync('src/db/migrations','dist/migrations',{recursive:true});cpSync('src/db/pg-migrations','dist/pg-migrations',{recursive:true})\"",

49 "dev": "tsup --watch",

50 "dev:verbose": "npm run build && mkdir -p ~/.threadbase/logs && node dist/cli.cjs serve --verbose 2>&1 | tee -a ~/.threadbase/logs/dev.log",

51 "preinstall": "node scripts/check-native-abi.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L51

52 "pretest": "node scripts/check-native-abi.mjs",

53 "test": "vitest run",

54 "test:verbose": "vitest run --reporter=verbose",

55 "test:watch": "vitest",

56 "lint": "tsc --noEmit && npx biome check .",

57 "format": "npx biome format --write .",

58 "check": "npx biome check --write .",

59 "prepare": "patch-package",

60 "postinstall": "node -e \"try{require('fs').chmodSync(require('path').join(require.resolve('node-pty'),'..','..','prebuilds',process.platform+'-'+process.arch,'spawn-helper'),0o755)}catch{}\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L60

61 "prepublishOnly": "npm run build",

62 "test:contracts": "vitest run __tests__/contracts/",

63 "test:e2e": "vitest run __tests__/e2e/",

64 "migrate": "tsx scripts/migrate.ts",

65 "migrate:projects": "tsx scripts/migrate-projects.ts",

66 "db:validate": "tsx scripts/validate-db.ts",

67 "update-schema": "tsx scripts/update-schema.ts",

68 "update-schema:mobile": "tsx scripts/update-schema.ts --mobile",

69 "update-schema:desktop": "tsx scripts/update-schema.ts --desktop",

70 "update-schema:shared": "tsx scripts/update-schema.ts --shared",

71 "deploy": "scripts/deploy.sh deploy",

72 "deploy:force": "scripts/deploy.sh deploy --force",

73 "deploy:rollback": "scripts/deploy.sh rollback",

74 "deploy:status": "scripts/deploy.sh status",

75 "deploy:healthcheck": "scripts/deploy.sh healthcheck",

76 "deploy:linux": "scripts/deploy-linux.sh deploy",

77 "deploy:linux:force": "scripts/deploy-linux.sh deploy --force",

78 "deploy:linux:rollback": "scripts/deploy-linux.sh rollback",

79 "deploy:linux:status": "scripts/deploy-linux.sh status",

80 "deploy:linux:healthcheck": "scripts/deploy-linux.sh healthcheck",

dist/index.jsView file

Lines 35-75javascript

36// src/agent/agent-config.ts

37var DEFAULTS = {

38 TEMPORAL_ADDRESS: "localhost:7233",

39 TEMPORAL_NAMESPACE: "default",

40 TEMPORAL_TASK_QUEUE: "agent-tasks",

41 PROGRESS_HMAC_SECRET: "dev-secret-change-me",

42 PROGRESS_WEBHOOK_TIMESTAMP_SKEW_SECONDS: "300",

dist/index.cjsView file

Lines 86-126javascript

87// src/agent/agent-config.ts

88var DEFAULTS = {

89 TEMPORAL_ADDRESS: "localhost:7233",

90 TEMPORAL_NAMESPACE: "default",

91 TEMPORAL_TASK_QUEUE: "agent-tasks",

92 PROGRESS_HMAC_SECRET: "dev-secret-change-me",

93 PROGRESS_WEBHOOK_TIMESTAMP_SKEW_SECONDS: "300",

dist/cli.cjsView file

•path = dist/cli.cjs kind = oversized_source_file sizeBytes = 7185340 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 7185340 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.cjsView on unpkg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "try{require('fs').chmodSync(require('path').join(require.resolve('node-pty'),'..','..','prebuilds',process.platform+'-'+process.arch,'spawn-helper'),0o755)}catch{}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.preinstall = node scripts/check-native-abi.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/index.jsView file

538// src/platform.ts L539: import { execFileSync } from "child_process"; L540: import { existsSync } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L538

55} L56: function readAgentConfig(env = process.env) { L57: const enabled = isTruthy(env.MULTI_AGENT_FLOW); ... L160: try { L161: return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected)); L162: } catch { ... L179: const app = new Hono(); L180: app.post("/sessions/:sessionId/progress", async (c) => { L181: if (!deps.agentConfig.enabled) { ... L281: function configDir() { L282: return process.env.THREADBASE_CONFIG_DIR ?? join2(homedir(), ".threadbase"); L283: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L55

dist/index.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @threadbase-sh/streamer@1.24.7 matchedIdentity = npm:QHRocmVhZGJhc2Utc2gvc3RyZWFtZXI:1.24.7 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.cjsView on unpkg

106Cross-file remote execution chain: dist/index.cjs spawns dist/index.js; helper contains network access plus dynamic code execution. L106: } L107: function readAgentConfig(env = process.env) { L108: const enabled = isTruthy(env.MULTI_AGENT_FLOW); ... L211: try { L212: return import_node_crypto.default.timingSafeEqual(Buffer.from(signature), Buffer.from(expected)); L213: } catch { ... L230: const app = new import_hono.Hono(); L231: app.post("/sessions/:sessionId/progress", async (c) => { L232: if (!deps.agentConfig.enabled) { ... L332: function configDir() { L333: return process.env.THREADBASE_CONFIG_DIR ?? (0, import_path.join)((0, import_os.homedir)(), ".threadbase"); L334: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.cjsView on unpkg · L106

dist/cli.cjsView file

•path = dist/cli.cjs kind = oversized_source_file sizeBytes = 7185340 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 7185340 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.cjsView on unpkg

Findings

2 Critical5 High4 Medium6 Low

CriticalRed Install Lifecycle Scriptpackage.json

CriticalPrevious Version Dangerous Deltadist/index.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/index.js

HighShell

HighCross File Remote Execution Contextdist/index.cjs

HighOversized Source Filedist/cli.cjs

MediumNetwork

MediumEnvironment Vars

MediumOversized Cli Entrypointdist/cli.cjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

86%Warn

Verdict confidence

IntentDangerous Capability

TypeAI-agent capability abuse

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only AI-agent capability risk

Package metadata

npm

AuthorRonen Mars

Maintainersronenmars

Version1.27.0

PublishedJul 12, 2026

LicenseMIT

Dependencies25

Integrityverified

Package size4.35 MB

Files28

Keywordsclaudeclaude-codeptywebsocketterminalstreamerthreadbase

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/index.cjsmodule → dist/index.jstypes → dist/index.d.tsexports mapbin → threadbase-streamer

Runtimenode >=18

Artifact21.5 MB · 28 files1 signature(s) · provenance

Install lifecyclepostinstallpreinstallprepareprepublishOnly

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

8 flagged

package.jsonView file

Lines 31-80json

31 "exports": {

32 ".": {

33 "types": "./dist/index.d.ts",

34 "import": "./dist/index.js",

35 "require": "./dist/index.cjs"

36 }

37 },

38 "files": [

39 "dist"

40 ],

41 "publishConfig": {

42 "access": "public"

43 },

44 "engines": {

45 "node": ">=18"

46 },

47 "scripts": {

48 "build": "tsup && node -e \"const{cpSync}=require('fs');cpSync('src/db/migrations','dist/migrations',{recursive:true});cpSync('src/db/pg-migrations','dist/pg-migrations',{recursive:true})\"",

49 "dev": "tsup --watch",

50 "dev:verbose": "npm run build && mkdir -p ~/.threadbase/logs && node dist/cli.cjs serve --verbose 2>&1 | tee -a ~/.threadbase/logs/dev.log",

51 "preinstall": "node scripts/check-native-abi.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L51

52 "pretest": "node scripts/check-native-abi.mjs",

53 "test": "vitest run",

54 "test:verbose": "vitest run --reporter=verbose",

55 "test:watch": "vitest",

56 "lint": "tsc --noEmit && npx biome check .",

57 "format": "npx biome format --write .",

58 "check": "npx biome check --write .",

59 "prepare": "patch-package",

60 "postinstall": "node -e \"try{require('fs').chmodSync(require('path').join(require.resolve('node-pty'),'..','..','prebuilds',process.platform+'-'+process.arch,'spawn-helper'),0o755)}catch{}\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L60

61 "prepublishOnly": "npm run build",

62 "test:contracts": "vitest run __tests__/contracts/",

63 "test:e2e": "vitest run __tests__/e2e/",

64 "migrate": "tsx scripts/migrate.ts",

65 "migrate:projects": "tsx scripts/migrate-projects.ts",

66 "db:validate": "tsx scripts/validate-db.ts",

67 "update-schema": "tsx scripts/update-schema.ts",

68 "update-schema:mobile": "tsx scripts/update-schema.ts --mobile",

69 "update-schema:desktop": "tsx scripts/update-schema.ts --desktop",

70 "update-schema:shared": "tsx scripts/update-schema.ts --shared",

71 "deploy": "scripts/deploy.sh deploy",

72 "deploy:force": "scripts/deploy.sh deploy --force",

73 "deploy:rollback": "scripts/deploy.sh rollback",

74 "deploy:status": "scripts/deploy.sh status",

75 "deploy:healthcheck": "scripts/deploy.sh healthcheck",

76 "deploy:linux": "scripts/deploy-linux.sh deploy",

77 "deploy:linux:force": "scripts/deploy-linux.sh deploy --force",

78 "deploy:linux:rollback": "scripts/deploy-linux.sh rollback",

79 "deploy:linux:status": "scripts/deploy-linux.sh status",

80 "deploy:linux:healthcheck": "scripts/deploy-linux.sh healthcheck",

dist/index.jsView file

Lines 35-75javascript

36// src/agent/agent-config.ts

37var DEFAULTS = {

38 TEMPORAL_ADDRESS: "localhost:7233",

39 TEMPORAL_NAMESPACE: "default",

40 TEMPORAL_TASK_QUEUE: "agent-tasks",

41 PROGRESS_HMAC_SECRET: "dev-secret-change-me",

42 PROGRESS_WEBHOOK_TIMESTAMP_SKEW_SECONDS: "300",

dist/index.cjsView file

Lines 86-126javascript

87// src/agent/agent-config.ts

88var DEFAULTS = {

89 TEMPORAL_ADDRESS: "localhost:7233",

90 TEMPORAL_NAMESPACE: "default",

91 TEMPORAL_TASK_QUEUE: "agent-tasks",

92 PROGRESS_HMAC_SECRET: "dev-secret-change-me",

93 PROGRESS_WEBHOOK_TIMESTAMP_SKEW_SECONDS: "300",

dist/cli.cjsView file

•path = dist/cli.cjs kind = oversized_source_file sizeBytes = 7185340 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 7185340 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.cjsView on unpkg