registry / cac-windows / 1.0.14

cac-windows@1.0.14

Claude Code Windows environment manager — identity isolation, fingerprint spoofing, timezone alignment.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 28.1 KB of source, external domains: cac.nextmind.space, github.com, registry.npmjs.org

Source & flagged code

8 flagged

package.jsonView file

Lines 1-41json

2 "name": "cac-windows",

3 "version": "1.0.14",

4 "description": "Claude Code Windows environment manager — identity isolation, fingerprint spoofing, timezone alignment.",

5 "bin": {

6 "cac": "cac"

7 },

8 "files": [

9 "cac",

10 "cac.ps1",

11 "cac.cmd",

12 "cac-dns-guard.js",

13 "fingerprint-hook.js",

14 "relay.js",

15 "scripts/postinstall.js",

16 "scripts/patch-cli.js",

17 "README.md",

18 "LICENSE"

19 ],

20 "scripts": {

21 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L21

22 },

23 "keywords": [

24 "claude",

25 "claude-code",

26 "anthropic",

27 "privacy",

28 "proxy",

29 "telemetry",

30 "fingerprint",

31 "windows",

32 "powershell",

33 "timezone",

34 "cloak",

35 "cli"

36 ],

37 "author": "234150476",

38 "license": "MIT",

39 "repository": {

40 "type": "git",

41 "url": "git+https://github.com/234150476/cac-windows.git"

scripts/postinstall.jsView file

Lines 1-45javascript

1#!/usr/bin/env node

2var path = require('path');

3var fs = require('fs');

5var pkgDir = path.join(__dirname, '..');

6var cacBin = path.join(pkgDir,

cac.ps1View file

•path = cac.ps1 kind = build_helper sizeBytes = 36688 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cac.ps1View on unpkg

cac-dns-guard.jsView file

•matchType = normalized_sha256 matchedPackage = cac-windows@1.0.10 matchedPath = cac-dns-guard.js matchedIdentity = npm:Y2FjLXdpbmRvd3M:1.0.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cac-dns-guard.jsView on unpkg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

25// Fallback: npm prefix L26: var spawnSync = require('child_process').spawnSync; L27: var result = spawnSync('npm', ['prefix', '-g'], { encoding: 'utf8', shell: true });

High

Child Process

Package source references child process execution.

scripts/postinstall.jsView on unpkg · L25

4L5: var pkgDir = path.join(__dirname, '..'); L6: var cacBin = path.join(pkgDir, 'cac'); L7: var home = process.env.HOME || process.env.USERPROFILE || ''; L8: var cacDir = path.join(home, '.cac'); ... L12: L13: // Windows: override npm-generated shims (cac.cmd, cac.ps1) to use PowerShell version. L14: // npm auto-generates shims that call `bash cac`, but on Windows the system `bash` ... L16: // Windows entry point, so we make the shims call it directly. L17: if (process.platform === 'win32') { L18: try { ... L27: var result = spawnSync('npm', ['prefix', '-g'], { encoding: 'utf8', shell: true });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.jsView on unpkg · L4

4Cross-file remote execution chain: scripts/postinstall.js spawns cac-dns-guard.js; helper contains network access plus dynamic code execution. L4: L5: var pkgDir = path.join(__dirname, '..'); L6: var cacBin = path.join(pkgDir, 'cac'); L7: var home = process.env.HOME || process.env.USERPROFILE || ''; L8: var cacDir = path.join(home, '.cac'); ... L12: L13: // Windows: override npm-generated shims (cac.cmd, cac.ps1) to use PowerShell version. L14: // npm auto-generates shims that call `bash cac`, but on Windows the system `bash` ... L16: // Windows entry point, so we make the shims call it directly. L17: if (process.platform === 'win32') { L18: try { ... L27: var result = spawnSync('npm', ['prefix', '-g'], { encoding: 'utf8', shell: true });

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.jsView on unpkg · L4

187console.log(' TZ patch will be skipped. Other cac features work normally.'); L188: console.log(' To get TZ support: npm i -g ' + CC_PKG + '@' + SUPPORTED_CLAUDE_VERSION); L189: } ... L193: if (needInstall) { L194: var installResult = spawnSync('npm', ['install', '-g', CC_PKG + '@' + SUPPORTED_CLAUDE_VERSION, L195: '--registry', 'https://registry.npmjs.org'], {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L187

cac.ps1View file

•path = cac.ps1 kind = build_helper sizeBytes = 36688 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cac.ps1View on unpkg

cac-dns-guard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cac-dns-guard.jsView on unpkg

Findings

6 High5 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processscripts/postinstall.js

HighSandbox Evasion Gated Capabilityscripts/postinstall.js

HighCross File Remote Execution Contextscripts/postinstall.js

HighRuntime Package Installscripts/postinstall.js

HighKnown Malware Source Similaritycac-dns-guard.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpercac.ps1

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

package.jsonView file

Lines 1-41json

2 "name": "cac-windows",

3 "version": "1.0.14",

4 "description": "Claude Code Windows environment manager — identity isolation, fingerprint spoofing, timezone alignment.",

5 "bin": {

6 "cac": "cac"

7 },

8 "files": [

9 "cac",

10 "cac.ps1",

11 "cac.cmd",

12 "cac-dns-guard.js",

13 "fingerprint-hook.js",

14 "relay.js",

15 "scripts/postinstall.js",

16 "scripts/patch-cli.js",

17 "README.md",

18 "LICENSE"

19 ],

20 "scripts": {

21 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L21

22 },

23 "keywords": [

24 "claude",

25 "claude-code",

26 "anthropic",

27 "privacy",

28 "proxy",

29 "telemetry",

30 "fingerprint",

31 "windows",

32 "powershell",

33 "timezone",

34 "cloak",

35 "cli"

36 ],

37 "author": "234150476",

38 "license": "MIT",

39 "repository": {

40 "type": "git",

41 "url": "git+https://github.com/234150476/cac-windows.git"

scripts/postinstall.jsView file

Lines 1-45javascript

1#!/usr/bin/env node

2var path = require('path');

3var fs = require('fs');

5var pkgDir = path.join(__dirname, '..');

6var cacBin = path.join(pkgDir,

cac.ps1View file

•path = cac.ps1 kind = build_helper sizeBytes = 36688 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cac.ps1View on unpkg

cac-dns-guard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cac-dns-guard.jsView on unpkg

Lines 167-207javascript

167var SUPPORTED_CLAUDE_VERSION = '2.1.202';

168var CC_PKG = '@anthropic-ai/claude-code';

169if (process.platform === 'win32') {

170 var spawnSync = require('child_process').spawnSync;

171 var npmPrefix = process.env.npm_config_prefix || path.join(home, 'AppData', 'Roaming', 'npm');

172 var ccDir = path.join(npmPrefix, 'node_modules', CC_PKG);

173 var ccBinDir = path.join(ccDir, 'bin');

174 var ccInstall = path.join(ccDir, 'install.cjs');

175 var ccPkgJson = path.join(ccDir, 'package.json');

176

177 // Step 1: Check if Claude Code is installed

178 var needInstall = false;

179 if (!fs.existsSync(ccPkgJson)) {

180 console.log(' Claude Code not found — installing v' + SUPPORTED_CLAUDE_VERSION + '...');

181 needInstall = true;

182 } else {

183 try {

184 var ccVersion = JSON.parse(fs.readFileSync(ccPkgJson, 'utf8')).version;

185 if (ccVersion !== SUPPORTED_CLAUDE_VERSION) {

186 console.log(' Claude Code v' + ccVersion + ' detected (TZ patch supports v' + SUPPORTED_CLAUDE_VERSION + ').');

187 console.log(' TZ patch will be skipped. Other cac features work normally.');

188 console.log(' To get TZ support: npm i -g ' + CC_PKG + '@' + SUPPORTED_CLAUDE_VERSION);

189 }

190 } catch (e) { needInstall = true; }

191 }

192

193 if (needInstall) {

194 var installResult = spawnSync('npm', ['install', '-g', CC_PKG + '@' + SUPPORTED_CLAUDE_VERSION,

195 '--registry', 'https://registry.npmjs.org'], {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L187

196 encoding: 'utf8', shell: true, stdio: 'inherit', timeout: 120000

197 });

198 if (installResult.status !== 0) {

199 console.log(' \x1b[33m⚠ Claude Code install failed\x1b[0m — install manually:');

200 console.log(' npm i -g ' + CC_PKG + '@' + SUPPORTED_CLAUDE_VERSION);

201 }

202 }

203

204 // Step 2: Ensure install.cjs has run (extracts the SEA binary)

205 try {

206 var hasExe = fs.existsSync(path.join(ccBinDir, 'claude.exe')) || fs.existsSync(path.join(ccBinDir, 'claude'));

207 if (!hasExe && fs.existsSync(ccInstall)) {