Loading npm security reports…

claude-code-cache-fix: Suspicious npm security report (Warn) | LPM Firewall

registry / claude-code-cache-fix / 4.3.0

claude-code-cache-fix@4.3.0

Cache optimization proxy and interceptor for Claude Code. Fixes prompt cache bugs, stabilizes prefix, reduces quota burn.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 62 file(s), 652 KB of source, external domains: 127.0.0.1, api.anthropic.com, github.com, platform.claude.com

Source & flagged code

9 flagged

package.jsonView file

Lines 10-50json

10 "main": "./preload.mjs",

11 "bin": {

12 "cache-fix-proxy": "./bin/claude-via-proxy.mjs"

13 },

14 "files": [

15 "preload.mjs",

16 "postinstall.js",

17 "tools/",

18 "hooks/",

19 "claude-fixed.bat",

20 "proxy/",

21 "bin/",

22 "templates/",

23 "THIRD_PARTY_LICENSES"

24 ],

25 "engines": {

26 "node": ">=18"

27 },

28 "scripts": {

29 "test": "node --test",

30 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L30

31 },

32 "dependencies": {

33 "hpagent": "^1.2.0",

34 "proper-lockfile": "^4.1.2"

35 },

36 "peerDependenciesMeta": {

37 "sharp": {

38 "optional": true

39 }

40 },

41 "keywords": [

42 "claude-code",

43 "claude",

44 "prompt-cache",

45 "cache-fix",

46 "anthropic",

47 "cost-optimization"

48 ],

49 "repository": {

50 "type": "git",

proxy/forward-proxy.mjsView file

Lines 4-44javascript

4// ANTHROPIC_BASE_URL. On Claude Code >= 2.1.196 a non-Anthropic base URL

5// disables Remote Control (RC). This transport instead sits in front of the

6// REAL api.anthropic.com as an HTTPS_PROXY: CC's base URL stays

7// api.anthropic.com, so RC keeps working, while we still see and transform

8// /v1/messages.

9//

10// It only MITMs the upstream host (api.anthropic.com), where the cacheable

11// /v1/messages traffic lives, and blind-tunnels every other CONNECT

12// (mcp-proxy.anthropic.com, telemetry, npm, ...) untouched, so RC/MCP and

13// unrelated traffic are unaffected. The decrypted upstream request is fed into

bin/install-service.mjsView file

Lines 25-65javascript

25 upstream: process.env.CACHE_FIX_PROXY_UPSTREAM || "",

26 caFile: process.env.CACHE_FIX_PROXY_CA_FILE || "",

27 rejectUnauthorized: process.env.CACHE_FIX_PROXY_REJECT_UNAUTHORIZED ||

proxy/pipeline.mjsView file

Lines 1-27javascript

1import { readdir, readFile } from "node:fs/promises";

2import { join } from "node:path";

3import { pathToFileURL } from "node:url";

5let registry = [];

proxy/extensions/deferred-tools-restore.mjsView file

Lines 1-41javascript

1// deferred-tools-restore — preserve cache prefix across MCP reconnect race.

2//

3// PROBLEM (mirrored from preload.mjs ~429-518):

4// On `claude --continue`, if MCP servers haven't finished reconnecting before

5// CC fires the first post-resume request, the

6// <system-reminder>The following deferred tools are now available via ToolSearch…</system-reminder>

7// block at msg[0] (or wherever the attachment lands post-compaction) shrinks

8// dramatically. ~40 tools collapse to a handful of CC built-ins, and CC

9// injects a trailing

bin/claude-via-proxy.mjsView file

Lines 187-227javascript

187 // Forward-proxy wiring. Leave ANTHROPIC_BASE_URL UNSET (that is exactly what

188 // keeps Remote Control enabled) and route claude through the proxy as an

189 // HTTPS proxy, trusting the MITM CA it generated on startup. Resolve the CA

190 // dir from the SAME inputs as the proxy's config.caDir, in the same order:

191 // CACHE_FIX_CA_DIR wins, else ${CLAUDE_CONFIG_DIR||~/.claude}/cache-fix-ca.

192 // (Reading only CLAUDE_CONFIG_DIR here would ignore a CACHE_FIX_CA_DIR

193 // override and point claude at the wrong — or absent — CA than the one the

tools/manual-compact.shView file

•path = tools/manual-compact.sh kind = build_helper sizeBytes = 9056 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/manual-compact.shView on unpkg

tools/gh-auth-status-shim/tests/mocks/gh-mock.shView file

•path = tools/gh-auth-status-shim/tests/mocks/gh-mock.sh kind = payload_in_excluded_dir sizeBytes = 2368 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

tools/gh-auth-status-shim/tests/mocks/gh-mock.shView on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

Source & flagged code

9 flagged

package.jsonView file

Lines 10-50json

10 "main": "./preload.mjs",

11 "bin": {

12 "cache-fix-proxy": "./bin/claude-via-proxy.mjs"

13 },

14 "files": [

15 "preload.mjs",

16 "postinstall.js",

17 "tools/",

18 "hooks/",

19 "claude-fixed.bat",

20 "proxy/",

21 "bin/",

22 "templates/",

23 "THIRD_PARTY_LICENSES"

24 ],

25 "engines": {

26 "node": ">=18"

27 },

28 "scripts": {

29 "test": "node --test",

30 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L30

31 },

32 "dependencies": {

33 "hpagent": "^1.2.0",

34 "proper-lockfile": "^4.1.2"

35 },

36 "peerDependenciesMeta": {

37 "sharp": {

38 "optional": true

39 }

40 },

41 "keywords": [

42 "claude-code",

43 "claude",

44 "prompt-cache",

45 "cache-fix",

46 "anthropic",

47 "cost-optimization"

48 ],

49 "repository": {

50 "type": "git",

proxy/forward-proxy.mjsView file

Lines 4-44javascript

4// ANTHROPIC_BASE_URL. On Claude Code >= 2.1.196 a non-Anthropic base URL

5// disables Remote Control (RC). This transport instead sits in front of the

6// REAL api.anthropic.com as an HTTPS_PROXY: CC's base URL stays

7// api.anthropic.com, so RC keeps working, while we still see and transform

8// /v1/messages.

9//

10// It only MITMs the upstream host (api.anthropic.com), where the cacheable

11// /v1/messages traffic lives, and blind-tunnels every other CONNECT

12// (mcp-proxy.anthropic.com, telemetry, npm, ...) untouched, so RC/MCP and

13// unrelated traffic are unaffected. The decrypted upstream request is fed into

bin/install-service.mjsView file

Lines 25-65javascript

25 upstream: process.env.CACHE_FIX_PROXY_UPSTREAM || "",

26 caFile: process.env.CACHE_FIX_PROXY_CA_FILE || "",

27 rejectUnauthorized: process.env.CACHE_FIX_PROXY_REJECT_UNAUTHORIZED ||

proxy/pipeline.mjsView file

Lines 1-27javascript

1import { readdir, readFile } from "node:fs/promises";

2import { join } from "node:path";

3import { pathToFileURL } from "node:url";

5let registry = [];

proxy/extensions/deferred-tools-restore.mjsView file

Lines 1-41javascript

1// deferred-tools-restore — preserve cache prefix across MCP reconnect race.

2//

3// PROBLEM (mirrored from preload.mjs ~429-518):

4// On `claude --continue`, if MCP servers haven't finished reconnecting before

5// CC fires the first post-resume request, the

6// <system-reminder>The following deferred tools are now available via ToolSearch…</system-reminder>

7// block at msg[0] (or wherever the attachment lands post-compaction) shrinks

8// dramatically. ~40 tools collapse to a handful of CC built-ins, and CC

9// injects a trailing

bin/claude-via-proxy.mjsView file

Lines 187-227javascript

187 // Forward-proxy wiring. Leave ANTHROPIC_BASE_URL UNSET (that is exactly what

188 // keeps Remote Control enabled) and route claude through the proxy as an

189 // HTTPS proxy, trusting the MITM CA it generated on startup. Resolve the CA

190 // dir from the SAME inputs as the proxy's config.caDir, in the same order:

191 // CACHE_FIX_CA_DIR wins, else ${CLAUDE_CONFIG_DIR||~/.claude}/cache-fix-ca.

192 // (Reading only CLAUDE_CONFIG_DIR here would ignore a CACHE_FIX_CA_DIR

193 // override and point claude at the wrong — or absent — CA than the one the

tools/manual-compact.shView file

•path = tools/manual-compact.sh kind = build_helper sizeBytes = 9056 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/manual-compact.shView on unpkg

tools/gh-auth-status-shim/tests/mocks/gh-mock.shView file

•path = tools/gh-auth-status-shim/tests/mocks/gh-mock.sh kind = payload_in_excluded_dir sizeBytes = 2368 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

tools/gh-auth-status-shim/tests/mocks/gh-mock.shView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code