registry / claude-multiacc / 2.0.57
claude-multiacc@2.0.57
Unified Claude Code and OpenAI Codex subscription pooling with quota-aware selection.
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection confirms guarded postinstall setup of first-party scheduled agents and an updater. This presents an agent lifecycle risk, but the inspected behavior does not establish a concrete attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installing globally through npm outside CI, unless postinstall is skipped.
Impact
The package’s own tasks can run periodically in the user’s session and update the package.
Mechanism
The postinstall hook runs install.sh, which writes LaunchAgent files and loads scheduled tasks, including a daily updater enabled by default.
AI rationale
Source inspection confirms guarded postinstall setup of first-party scheduled agents and an updater. This presents an agent lifecycle risk, but the inspected behavior does not establish a concrete attack.
Evidence
package.jsonscripts/postinstall.mjsinstall.sh
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall hook that proceeds only for a global, non-CI install unless explicitly skipped.
- That hook runs the installer, which creates and loads scheduled macOS agents for account-limit and health tasks.
- The installer also enables a daily update agent by default, with an environment variable to disable it.
Evidence against
- The flagged test file contains ordinary unit-test fixtures; the inspected excerpt has no executable payload behavior.
- The Claude shim describes and implements account selection while leaving the real Claude binary intact.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg57"postinstall": "node scripts/postinstall.mjs",
"test": "npm run test:core &&
Medium
Suspicious Lifecycle Evidence
The package runs a postinstall hook that proceeds only for a global, non-CI install unless explicitly skipped.
package.jsonView on unpkg · L57install.shView file
Findings
4 High5 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPayload In Excluded Dirtests/test_autoresume.py
HighSemantic Analysis Limitedbin/claude-accounts
HighPrevious Version Dangerous Deltabin/claude
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to claude-multiacc@2.0.57.
See all versions of claude-multiacc for other recorded verdicts.
- Review the evidence and your use of claude-multiacc@2.0.57 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.