registry / claude-code-zanii / 2.8.4
claude-code-zanii@2.8.4
Reverse-engineered Anthropic Claude Code CLI — interactive AI coding assistant in the terminal
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has a concrete install-time agent-extension setup surface, warranting a warning. Its inspected lifecycle code does not substantiate malicious behavior requiring a block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm install postinstall
Impact
Creates package-local vendor content and may configure the package-owned Chrome MCP bridge.
Mechanism
automatic binary download and Chrome MCP bridge registration
AI rationale
The package has a concrete install-time agent-extension setup surface, warranting a warning. Its inspected lifecycle code does not substantiate malicious behavior requiring a block.
Evidence
package.jsonscripts/postinstall.cjsscripts/setup-chrome-mcp.mjsdist/vendor/ripgrep
Network endpoints2
github.com/microsoft/ripgrep-prebuilt/releases/download/v15.0.1ghproxy.net/https://github.com/microsoft/ripgrep-prebuilt/releases/download/v15.0.1
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- npm postinstall automatically launches Chrome MCP setup.
- Setup invokes a bridge CLI with register --browser chrome without an explicit user command.
- Postinstall downloads and installs a platform ripgrep binary.
Evidence against
- Chrome setup is a same-vendor bridge dependency and is skippable via an environment flag.
- The download code identifies ripgrep releases and writes only under the package vendor directory.
- No credential harvesting or exfiltration was confirmed in inspected lifecycle sources.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings
Source & flagged code
20 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/chunks/dist-es-TZjwPaGn.jsView file
1import{n as e}from"./chunk-DR8-3Aex.js";import{h as t,t as n}from"./client-CinDjeSq.js";import{o as r,t as i}from"./dist-es-BPPewn1A.js";import{n as a,r as o,t as s,u as c}from"./d...
High
Child Process
Package source references child process execution.
Findings
1 Critical15 High8 Medium8 Low
CriticalBrowser Credential Phishingdist/chunks/esm-Q6Yz2GMx.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/chunks/dist-es-TZjwPaGn.js
HighShell
HighSame File Env Network Executiondist/chunks/main-CFhpWtpC.js
HighCommand Output Exfiltrationdist/chunks/main-CFhpWtpC.js
HighSandbox Evasion Gated Capabilitydist/chunks/lib-DRyNc7xD.js
HighCloud Metadata Accessdist/chunks/dist-es-Ci_rKlMr.js
HighInstall Named Payload Filescripts/postinstall.cjs
HighCross File Remote Execution Contextdist/chunks/ripgrep-BEWqxrpl.js
HighSemantic Analysis Limiteddist/chunks/plist-DLGDWBD6.js
Affected versions and remediation
This report applies to claude-code-zanii@2.8.4.
See all versions of claude-code-zanii for other recorded verdicts.
- Review the evidence and your use of claude-code-zanii@2.8.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.