registry / claude-multiacc / 2.0.16
claude-multiacc@2.0.16
Unified Claude Code and OpenAI Codex subscription pooling with quota-aware selection.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe global-only postinstall performs first-party command and scheduled-task setup that affects Claude and Codex invocation. This warrants a warning for lifecycle setup; the inspected source does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installing globally through npm, unless the hook is skipped by its environment checks.
Impact
The package gains automatic command routing and recurring execution for its own tools. The inspected behavior supports a warning for lifecycle setup, but does not establish a concrete malicious attack.
Mechanism
The postinstall script launches install.sh, which appends package PATH entries and installs scheduled jobs; root Linux setup also creates system-wide command shims.
AI rationale
The global-only postinstall performs first-party command and scheduled-task setup that affects Claude and Codex invocation. This warrants a warning for lifecycle setup; the inspected source does not establish malicious behavior.
Evidence
package.jsonscripts/postinstall.mjsinstall.sh
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall hook that starts its bundled installer on global installs.
- The installer adds PATH blocks to shell startup files and installs scheduled jobs.
- On Linux root installs, the installer creates system-wide Claude and Codex command shims.
Evidence against
- The postinstall skips local installs, CI, Windows, and installs without npm’s global-install flag.
- The setup installs this package’s own account-management tools and command shims.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg55"postinstall": "node scripts/postinstall.mjs",
"test": "bash tests/run-tests.sh && python3 tests/test_selector.py"
},
"dependencies": {
"update-noti
Medium
Suspicious Lifecycle Evidence
The package runs a postinstall hook that starts its bundled installer on global installs.
package.jsonView on unpkg · L55install.shView file
Findings
4 High5 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPayload In Excluded Dirtests/test_selector.py
HighSemantic Analysis Limitedbin/multiacc-select
HighPrevious Version Dangerous Deltabin/claude
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to claude-multiacc@2.0.16.
See all versions of claude-multiacc for other recorded verdicts.
- Review the evidence and your use of claude-multiacc@2.0.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.