registry / claude-code-infinite / 1.0.29
claude-code-infinite@1.0.29
Wrapper for Claude Code CLI
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe postinstall telemetry is package-aligned, sends a bounded install event, and honors diagnostics opt-outs and additional skip conditions. Inspection of the lifecycle and runtime source did not confirm the scanner's alleged payload execution or agent control-surface behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation triggers the postinstall diagnostics ping; launching the CLI triggers its user-facing runtime behavior.
Impact
No confirmed malicious impact was found in the inspected source.
Mechanism
The ping sends an install identifier and bounded package, runtime, and install-method metadata to the package's Polychat diagnostics service. Reviewed runtime helpers format tree data, restrict saved-key requests to listed service hosts, and create session plugin files for Claude Code.
AI rationale
The postinstall telemetry is package-aligned, sends a bounded install event, and honors diagnostics opt-outs and additional skip conditions. Inspection of the lifecycle and runtime source did not confirm the scanner's alleged payload execution or agent control-surface behavior.
Evidence
package.jsondist/postinstall.jsdist/install-ping.jsdist/diagnostics.jsdist/hooks.js
Network endpoints2
api.polychat.coclaude.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs an install ping to the same Polychat service used by the package; its event contains package and runtime metadata plus an install identifier.
- The diagnostics send can be disabled through environment or config opt-outs and skips root, CI, automatic updates, and development installs.
- Claude Code installation is offered to the user and runs only after an affirmative answer; locating Claude Code probes paths and uses a bounded Windows registry query.
- Saved MemTree keys are sent only to listed Polychat hosts, and the output helpers format supplied tree and transcript data.
- The required runtime, lifecycle, diagnostics, and dependency sources show no confirmed malicious behavior; the inspected dependency entrypoint delegates to its spawn library.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node dist/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node dist/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/claude-install.jsView file
77try {
L78: const child = spawn(installer.command, installer.args, {
L79: stdio: ["inherit", toStderr ? process.stderr : "inherit", "inherit"],
High
Child Process
Package source references child process execution.
dist/claude-install.jsView on unpkg · L77Findings
4 Critical5 High4 Medium5 Low
CriticalDownload Executedist/claude-locate.js#virtual:normalized:round1
CriticalAi Agent Control Hijackdist/diagnostics-schema.js
CriticalTrigger Reachable Dangerous Capabilitydist/claude-locate.js#virtual:normalized:round1
CriticalPrevious Version Dangerous Deltadist/cli-main.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/claude-install.js
HighShelldist/cli-main.js
HighSame File Env Network Executiondist/cli-main.js
HighSemantic Analysis Limiteddist/cc-request.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
Affected versions and remediation
This report applies to claude-code-infinite@1.0.29.
See all versions of claude-code-infinite for other recorded verdicts.
- Review the evidence and your use of claude-code-infinite@1.0.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.