claude-code-infinite@1.0.33
Wrapper for Claude Code CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe default postinstall sends telemetry, which warrants a warning under the install-hook telemetry rule. The payload is described and constrained to allowlisted package and runtime details, and the ping provides opt-outs, so the source does not support a malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm install or reinstall, unless an opt-out or skip condition applies.
Impact
The service can count and link installs across install and runtime events; the behavior is disclosed and opt-out controls are provided.
Mechanism
The postinstall hook sends an allowlisted event with a persistent install ID and package/runtime context.
AI rationale
The default postinstall sends telemetry, which warrants a warning under the install-hook telemetry rule. The payload is described and constrained to allowlisted package and runtime details, and the ping provides opt-outs, so the source does not support a malicious verdict.
Evidence
package.jsondist/postinstall.jsdist/install-ping.js~/.claude-code-infinite/install_id~/.claude-code-infinite/first_run_pending
Network endpoints1
api.polychat.co/v1/ccc/diagnostics
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- npm runs a postinstall hook that invokes the install ping.
- The hook sends an HTTP POST to the package’s diagnostics endpoint.
- The install event includes a persistent install ID and allowlisted install context.
- The ping skips installs when a listed telemetry opt-out is set.
Evidence against
- The install ping is disclosed in the README and has documented opt-outs.
- The described payload contains package and runtime details, not credentials, paths, or environment values.
- Runtime diagnostics are documented and also have opt-outs.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node dist/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node dist/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/claude-install.jsView file
77try {
L78: const child = spawn(installer.command, installer.args, {
L79: stdio: ["inherit", toStderr ? process.stderr : "inherit", "inherit"],
High
Child Process
Package source references child process execution.
dist/claude-install.jsView on unpkg · L77Findings
4 Critical5 High4 Medium5 Low
CriticalDownload Executedist/claude-locate.js#virtual:normalized:round1
CriticalAi Agent Control Hijackdist/diagnostics-schema.js
CriticalTrigger Reachable Dangerous Capabilitydist/claude-locate.js#virtual:normalized:round1
CriticalPrevious Version Dangerous Deltadist/cli-main.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/claude-install.js
HighShelldist/cli-main.js
HighSame File Env Network Executiondist/cli-main.js
HighSemantic Analysis Limiteddist/cc-request.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
Affected versions and remediation
This report applies to claude-code-infinite@1.0.33.
See all versions of claude-code-infinite for other recorded verdicts.
- Review the evidence and your use of claude-code-infinite@1.0.33 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.