registry / claude-multiacc / 2.0.35
claude-multiacc@2.0.35
Unified Claude Code and OpenAI Codex subscription pooling with quota-aware selection.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe postinstall performs guarded setup for this package's own CLI shims and scheduled jobs, creating a real lifecycle-related concern. Source inspection did not establish a concrete malicious chain, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
npm global installation, unless the skip variable is set or CI is detected.
Impact
The package can change which Claude or Codex CLI runs and configure its scheduled jobs after a global install.
Mechanism
The postinstall script invokes install.sh, whose setup writes marked PATH configuration and a prompt hook to shell startup configuration.
AI rationale
The postinstall performs guarded setup for this package's own CLI shims and scheduled jobs, creating a real lifecycle-related concern. Source inspection did not establish a concrete malicious chain, so this warrants a warning rather than a block.
Evidence
package.jsonscripts/postinstall.mjslib/install_actions.shshell startup configurationscheduled job configuration
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json registers a postinstall hook that launches the package setup script.
- The hook runs for global installs unless skipped or in CI, and starts install.sh.
- The installer writes PATH blocks into shell startup files, including a prompt hook that keeps the package shim first on PATH.
- The Codex shim supports explicit passthrough and selects among configured account profiles; no malicious network or credential-exfiltration behavior was established.
Evidence against
- The postinstall is limited to global installs and can be skipped; the setup configures this package's own CLI shim and scheduled jobs.
- The Codex shim passes through when CODEX_HOME is set, the addon is disabled, or account data is absent.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg57"postinstall": "node scripts/postinstall.mjs",
"test": "npm run test:core && npm run test:seeding && npm run test:commands",
"test:core": "bash tests/run-tests.sh && python
Medium
Suspicious Lifecycle Evidence
package.json registers a postinstall hook that launches the package setup script.
package.jsonView on unpkg · L57install.shView file
Findings
4 High5 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPayload In Excluded Dirtests/test_shim_path.py
HighSemantic Analysis Limitedbin/claude-accounts
HighKnown Malware Source Similaritybin/codex
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to claude-multiacc@2.0.35.
See all versions of claude-multiacc for other recorded verdicts.
- Review the evidence and your use of claude-multiacc@2.0.35 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.