Loading npm security reports…

ccclub@0.8.2: AI-agent control-surface risk | LPM Firewall

registry / ccclub / 0.8.2

ccclub@0.8.2

Claude Code and Codex leaderboard among friends for coding agent tokens and costs

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall mutates an existing foreign Claude Code control surface without an explicit ccclub command. It adds hooks that execute ccclub through npx at Claude session end and stop events.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install of ccclub when ~/.claude/settings.json exists

Impact

Persistent execution of ccclub sync during Claude Code lifecycle events; the command can upload collected usage data after prior ccclub setup.

Mechanism

install-time injection of Claude Code command hooks

Policy narrative

Installing the package automatically runs its postinstall script. If Claude Code settings already exist, it rewrites them to add asynchronous SessionEnd and Stop hooks invoking `npx --yes ccclub@0.8.2 sync --silent`; this is a foreign AI-agent control-surface mutation without a user setup command. On macOS it also refreshes an existing ccclub LaunchAgent configured to run the same sync command every 300 seconds.

Rationale

The source establishes an unconsented postinstall persistence path into Claude Code, meeting the firewall block boundary. The later sync upload is config-gated, but the control-surface mutation itself occurs at install time.

Evidence

package.jsonscripts/postinstall.cjsdist/index.js~/.claude/settings.json~/Library/LaunchAgents/dev.ccclub.sync.plist

Network endpoints1

ccclub.dev

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

7import { createInterface as createInterface2 } from "readline/promises"; L8: import { stdin, stdout } from "process"; L9: import chalk5 from "chalk"; ... L17: import { randomBytes } from "crypto"; L18: import { execSync } from "child_process"; L19: ... L125: var BLOCK_DURATION_MS = BLOCK_DURATION_MIN * 60 * 1e3; L126: var DEFAULT_API_URL = "https://ccclub.dev"; L127: var CLAUDE_PROJECTS_DIR = ".claude/projects"; ... L2535: function getConfigDir() { L2536: return join(homedir(), CCCLUB_CONFIG_DIR); L2537: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L7

scripts/postinstall.cjsView file

11L12: const settingsPath = path.join(os.homedir(), ".claude", "settings.json"); L13: const HOOK_COMMAND = `npx --yes ccclub@${pkg.version} sync --silent`; ... L86: try { L87: fs.writeFileSync(tmp, data); L88: fs.renameSync(tmp, target);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.cjsView on unpkg · L11

8Trigger-reachable persistence chain: scripts.postinstall -> scripts/postinstall.cjs L8: const os = require("os"); L9: const { execFileSync } = require("child_process"); L10: const pkg = require("../package.json"); L11: L12: const settingsPath = path.join(os.homedir(), ".claude", "settings.json"); L13: const HOOK_COMMAND = `npx --yes ccclub@${pkg.version} sync --silent`; ... L34: L35: const settings = JSON.parse(fs.readFileSync(settingsPath, "utf-8")); L36: if (!settings.hooks) settings.hooks = {}; ... L139: // init/join/sync's decision, not npm's. L140: if (process.platform !== "darwin") return; L141: if (!fs.existsSync(PLIST_PATH)) return;

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

scripts/postinstall.cjsView on unpkg · L8