registry / claude-code-infinite / 1.0.30
claude-code-infinite@1.0.30
Wrapper for Claude Code CLI
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe install telemetry is package-aligned and limited, with opt-outs and skip conditions, while runtime credentials are sent to the mode-selected Polychat service. The inspected source does not establish a concrete attack surface.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The npm postinstall hook sends an install ping unless a skip condition applies; runtime diagnostics are activated when the CLI runs and diagnostics are enabled.
Impact
The service receives install telemetry and authenticated product requests; the inspected source does not establish unrelated credential collection or control-surface changes.
Mechanism
The install ping sends package and platform details with a persistent install identifier. Runtime requests use a mode-selected service URL and the corresponding Polychat API key.
AI rationale
The install telemetry is package-aligned and limited, with opt-outs and skip conditions, while runtime credentials are sent to the mode-selected Polychat service. The inspected source does not establish a concrete attack surface.
Evidence
package.jsondist/memtree.jsdist/cli-main.jsdist/memtree-tools.jsdist/memtree-fetch.jsdist/key-status.jsdist/link-command.js.lpm-dependency-evidence-f106b41c-e88c-457d-96fd-95d8a92e1da5/0/npm-linux/package.json.lpm-dependency-evidence-f106b41c-e88c-457d-96fd-95d8a92e1da5/0/npm-linux/index.jsdist/cc-request.jsdist/claude-auth.jsdist/claude-install.jsdist/claude-locate.jsdist/hooks.jsdist/project-trees.jsdist/diagnostics-schema.js
Network endpoints3
api.polychat.copolychat-staging-421312241218.us-west2.run.applocalhost:8080
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs a postinstall ping; the inspected hook posts limited install details to the Polychat diagnostics endpoint and honors opt-out and environment guards.
- Runtime MemTree requests send the configured Polychat API key to a URL selected by mode; production and staging use Polychat service URLs, while local mode uses its separately configured key and local URL.
- Diagnostics can attach that Polychat API key to the selected service's diagnostics request; events are sent only when diagnostics are enabled and are rebuilt from allowlisted fields.
- The remaining inspected files cover MemTree input formatting and retrieval, Claude discovery and installation, proxy requests, hooks, project session lookups, and the cross-spawn dependency; they establish no separate attack behavior.
Evidence against
- The postinstall ping runs without a prompt when no opt-out or skip condition applies, and includes a persistent install identifier and basic platform and version details.
- Runtime diagnostics can send the Polychat API key in an authentication header to the mode-selected service.
Behavioral surface
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node dist/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node dist/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/claude-install.jsView file
77try {
L78: const child = spawn(installer.command, installer.args, {
L79: stdio: ["inherit", toStderr ? process.stderr : "inherit", "inherit"],
High
Child Process
Package source references child process execution.
dist/claude-install.jsView on unpkg · L77Findings
4 Critical5 High4 Medium5 Low
CriticalDownload Executedist/claude-locate.js#virtual:normalized:round1
CriticalAi Agent Control Hijackdist/diagnostics-schema.js
CriticalTrigger Reachable Dangerous Capabilitydist/claude-locate.js#virtual:normalized:round1
CriticalPrevious Version Dangerous Deltadist/cli-main.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/claude-install.js
HighShelldist/cli-main.js
HighSame File Env Network Executiondist/cli-main.js
HighSemantic Analysis Limiteddist/cc-request.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
Affected versions and remediation
This report applies to claude-code-infinite@1.0.30.
See all versions of claude-code-infinite for other recorded verdicts.
- Review the evidence and your use of claude-code-infinite@1.0.30 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.