claude-code-infinite@1.0.32
Wrapper for Claude Code CLI
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package sends install-time telemetry by default, which warrants a warning even though the inspected event contains only limited installation metadata and has opt-outs. I found no evidence that this hook sends credentials or project data.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm installation runs the postinstall hook; the ping is skipped only under configured opt-outs or specified environment conditions.
Impact
The publisher can count and associate installations without an affirmative opt-in; no sensitive data was identified in the event payload.
Mechanism
The hook POSTs an installed event with package/runtime/platform details and an install ID to https://api.polychat.co/v1/ccc/diagnostics.
AI rationale
The package sends install-time telemetry by default, which warrants a warning even though the inspected event contains only limited installation metadata and has opt-outs. I found no evidence that this hook sends credentials or project data.
Evidence
package.jsondist/postinstall.jsdist/install-ping.js
Network endpoints1
api.polychat.co/v1/ccc/diagnostics
Decision evidence
public snapshotAI called this Suspicious at 98.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The npm postinstall runs the install-ping entry point automatically.
- The install ping POSTs an “installed” event to api.polychat.co during installation unless its skip conditions apply.
- The event contains the package version, Node version, OS, architecture, install method, and install ID; the ping is disabled by recognized opt-outs.
Evidence against
- The reported install event is limited to package/runtime details and a random install ID; the inspected payload does not include credentials, paths, hostnames, or project contents.
- The hook skips sending when diagnostics are opted out, in CI, under root, for development installs, and during background updates.
- Claude Code credentials are described as staying with Claude Code; the observed MemTree authorization uses the package’s separate Polychat API key.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node dist/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node dist/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/claude-install.jsView file
77try {
L78: const child = spawn(installer.command, installer.args, {
L79: stdio: ["inherit", toStderr ? process.stderr : "inherit", "inherit"],
High
Child Process
Package source references child process execution.
dist/claude-install.jsView on unpkg · L77Findings
4 Critical5 High4 Medium5 Low
CriticalDownload Executedist/claude-locate.js#virtual:normalized:round1
CriticalAi Agent Control Hijackdist/diagnostics-schema.js
CriticalTrigger Reachable Dangerous Capabilitydist/claude-locate.js#virtual:normalized:round1
CriticalPrevious Version Dangerous Deltadist/cli-main.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/claude-install.js
HighShelldist/cli-main.js
HighSame File Env Network Executiondist/cli-main.js
HighSemantic Analysis Limiteddist/cc-request.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
Affected versions and remediation
This report applies to claude-code-infinite@1.0.32.
See all versions of claude-code-infinite for other recorded verdicts.
- Review the evidence and your use of claude-code-infinite@1.0.32 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.