registry / claude-down / 0.6.4

claude-down@0.6.4

⚠ Under review

Is claude code down? Probably...

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetworkWebSocket

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 32.9 KB of source, external domains: claude-down.kjanat.dev, downdetector.com, github.com, status.claude.com

Source & flagged code

3 flagged

dist/bin/cli.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import{ParseError as e,cli as t,command as n,flag as r,osc8 as i}from"@kjanat/dreamcli";import{createColors as a}from"ansispeck";import{spawn as o,spawnSync as s}from"node:child_process";import{existsSync as c,mkdtempSync as ee,rmSync as te}from"node:fs";import{tmpdir as ne}from"node:os";import{join as re,win32 as ie}from"node:path";import{setTimeout as l}from"node:timers/promises";import{argv as ae,platform as oe,stdout as se}from"node:process";import{createNodeAdapter as ce}from"@kjanat/dreamcli/runtime";var le=`claude-down`,u=`0.6.4`,ue=`Is claude code down? Probably...`,d=`https://claude-d ...

3`)}if(e.source===`downdetector`){let t=e.summaryText??`No user-reported issues`;return i.push(` ${r(t)}`),i.join(`

4`)}let o=e.summaryText??`All systems operational`;i.push(` ${r(o)}`);let s=e.incidents?.map(e=>`${e.name} (${e.status})`)??[];return F(i,s.length===1?`Active incident`:`Active incidents`,s),F

5`)}function ve(e){return e.source===`downdetector`?{source:`downdetector`,status:e.indicator===`unavailable`?`unavailable`:e.reportsOutage?`down`:`up`,details:e.summaryText}:{source:`anthropic`,status:e.indicator===`none`?`up`:e.indicator,details:e.summaryText,incidents:e.incidents,affected:e.affectedComponents}}function ye(e){return e.map(e=>

7`))}function xe(e,t,n={}){let r=n.leadingBlank===!0?`

8`:``;t.log(`${r}${I(e,t.isTTY)}`)}function Se(e){if(e.jsonMode||!e.isTTY)return;let t=a(!0),n=t.link(d);e.log(`\n${t.dim(`Watch the live status page: ${

9 title: document.title,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/cli.mjsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bin/cli.mjsView on unpkg · L1

10 pogo: window.PogoConfig ?? null,

11 h1: document.querySelector('h1')?.innerText ?? null,

12 cfChallenge: document.title === 'Just a moment...'

13 || document.querySelector('script[src*="/cdn-cgi/challenge-platform/"]') !== null

14 || document.body?.innerText?.includes('Enable JavaScript and cookies to continue') === true,

15})`);if(H(t)&&t.cfChallenge===!0)return{kind:`cloudflare-challenge`};if(H(t)&&t.pogo!==null)return{kind:`status`,pogo:t.pogo,heading:t.h1};await l(700)}return null}const Ie=`

16const WEBVIEW_WIDTH = 1920;

17const WEBVIEW_HEIGHT = 1080;

18const SNAPSHOT_TIMEOUT_MS = 20000;

19const POLL_INTERVAL_MS = 700;

20const CHROME_ARGV = ${JSON.stringify([`--headless=new`,`--disable-gpu`,`--no-sandbox`,`--disable-blink-features=AutomationControlled`,`--window-size=1920,1080`,`--user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36`])};

Long lines were clipped for display.

•matchType = previous_version_dangerous_delta matchedPackage = claude-down@0.6.3 matchedIdentity = npm:Y2xhdWRlLWRvd24:0.6.3 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/cli.mjsView on unpkg

Source & flagged code

3 flagged · loading source

dist/bin/cli.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/cli.mjsView on unpkg

1#!/usr/bin/env node L2: import{ParseError as e,cli as t,command as n,flag as r,osc8 as i}from"@kjanat/dreamcli";import{createColors as a}from"ansispeck";import{spawn as o,spawnSync as s}from"node:child_pr... L3: `)}if(e.source===`downdetector`){let t=e.summaryText??`No user-reported issues`;return i.push(` ${r(t)}`),i.join(` ... L7: `))}function xe(e,t,n={}){let r=n.leadingBlank===!0?` L8: `:``;t.log(`${r}${I(e,t.isTTY)}`)}function Se(e){if(e.jsonMode||!e.isTTY)return;let t=a(!0),n=t.link(d);e.log(`\n${t.dim(`Watch the live status page: ${n}`)}`)}const L=`/api/v2`,Ce... L9: title: document.title,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/cli.mjsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bin/cli.mjsView on unpkg · L1

Findings

1 Critical2 High2 Medium3 Low

CriticalPrevious Version Dangerous Deltadist/bin/cli.mjs

HighSame File Env Network Executiondist/bin/cli.mjs

HighCommand Output Exfiltrationdist/bin/cli.mjs

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowUrl Strings

Source & flagged code

3 flagged

dist/bin/cli.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

3`)}if(e.source===`downdetector`){let t=e.summaryText??`No user-reported issues`;return i.push(` ${r(t)}`),i.join(`

4`)}let o=e.summaryText??`All systems operational`;i.push(` ${r(o)}`);let s=e.incidents?.map(e=>`${e.name} (${e.status})`)??[];return F(i,s.length===1?`Active incident`:`Active incidents`,s),F

7`))}function xe(e,t,n={}){let r=n.leadingBlank===!0?`

8`:``;t.log(`${r}${I(e,t.isTTY)}`)}function Se(e){if(e.jsonMode||!e.isTTY)return;let t=a(!0),n=t.link(d);e.log(`\n${t.dim(`Watch the live status page: ${

9 title: document.title,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/cli.mjsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bin/cli.mjsView on unpkg · L1

10 pogo: window.PogoConfig ?? null,

11 h1: document.querySelector('h1')?.innerText ?? null,

12 cfChallenge: document.title === 'Just a moment...'

13 || document.querySelector('script[src*="/cdn-cgi/challenge-platform/"]') !== null

14 || document.body?.innerText?.includes('Enable JavaScript and cookies to continue') === true,

15})`);if(H(t)&&t.cfChallenge===!0)return{kind:`cloudflare-challenge`};if(H(t)&&t.pogo!==null)return{kind:`status`,pogo:t.pogo,heading:t.h1};await l(700)}return null}const Ie=`

16const WEBVIEW_WIDTH = 1920;

17const WEBVIEW_HEIGHT = 1080;

18const SNAPSHOT_TIMEOUT_MS = 20000;

19const POLL_INTERVAL_MS = 700;

Long lines were clipped for display.

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/cli.mjsView on unpkg