registry / @threadlines/server / 0.8.0
@threadlines/server@0.8.0
Threadlines server and CLI for running coding-agent sessions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe suspicious credential and network indicators resolve to a Claude usage feature that sends the stored Claude token to Anthropic’s official API. The flagged invisible character is a zero-width space in text-rendering logic, and the CLI entry point is gated on direct invocation.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A Threadlines provider status or usage check.
Impact
No malicious impact identified; the credential is sent to its own service for usage data.
Mechanism
Reads the stored Claude sign-in and requests usage data from api.anthropic.com.
AI rationale
The suspicious credential and network indicators resolve to a Claude usage feature that sends the stored Claude token to Anthropic’s official API. The flagged invisible character is a zero-width space in text-rendering logic, and the CLI entry point is gated on direct invocation.
Network endpoints1
api.anthropic.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a Threadlines CLI entry point.
- The CLI runs only when the bundle is invoked as the main module.
- Claude usage checks send a Claude access token to Anthropic’s official usage endpoint.
- The provider check obtains Claude’s stored sign-in for that usage check.
- The flagged invisible character is a zero-width space used in text-rendering logic, not a bidi control.
Evidence against
- The package reads a Claude credential and makes network requests as part of provider usage checks.
- The package includes large bundled files, limiting easy review of all code.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flaggeddist/client/assets/SourceControlPanel-CCWacH_A.jsView file
29contains invisible/control Unicode U+200E (left-to-right mark)
`,DI=_I?`\xA0`:TI,OI=`֑-߿יִ-﷽ﹰ-ﻼ`,kI=`A-Za-zÀ-ÖØ-öø-ʸ̀-ࠀ-<U+200E>Ⰰ-︀--`;RegExp(`^[^`+kI+`]*[`+OI+`]`),RegExp(`^[^`+OI+`]*[`+kI+`]`);var AI={bold:1,capitalize:1024,code:16,highlight:128,italic:2,lowercase:256,strikethrough:4,subscript:3
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/client/assets/SourceControlPanel-CCWacH_A.jsView on unpkg · L29dist/bin-iAH2RUDM.mjsView file
•path = dist/bin-iAH2RUDM.mjs
kind = oversized_source_file
sizeBytes = 10323882
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/bin-iAH2RUDM.mjsView on unpkgFindings
1 Critical1 High5 Medium5 Low
CriticalTrojan Source Unicodedist/client/assets/SourceControlPanel-CCWacH_A.js
HighSemantic Analysis Limiteddist/client/assets/PYZXGPSM-CQBpqmuw.js#virtual:string-array:round1
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/bin-iAH2RUDM.mjs
MediumOversized Cli Entrypointdist/bin-iAH2RUDM.mjs
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to @threadlines/server@0.8.0.
See all versions of @threadlines/server for other recorded verdicts.
- Review the evidence and your use of @threadlines/server@0.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.