claude-multiacc@2.0.6

Unified Claude Code and OpenAI Codex subscription pooling with quota-aware selection.

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The automatic global-install setup mutates the environment used by Claude and schedules recurring account tasks, presenting an agent-extension lifecycle risk. The inspected source shows first-party account-pooling setup and no confirmed malicious behavior, so this warrants a warning rather than a block.

Static reason

One or more suspicious static signals were detected.

Trigger

A global npm install, unless skipped by the postinstall conditions.

Impact

The package alters command resolution and schedules recurring account-pool tasks as part of global setup.

Mechanism

The postinstall launches the bundled installer, which creates a Claude shim and schedules account-management commands.

AI rationale

Evidence

package.jsonscripts/postinstall.mjsinstall.sh

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package defines a postinstall hook that runs its installer.
The hook skips non-global installs and invokes the bundled installer on global installs.
The installer creates a Claude command shim and schedules recurring account-management jobs.

Evidence against

The postinstall is gated to global installs, and the installer changes are first-party Claude and Codex account-pooling setup.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 6.67 KB of source

Source & flagged code

7 flagged

package.jsonView file

Lines 35-62json

35 ],

36 "author": {

37 "name": "Gowalk"

38 },

39 "license": "MIT",

40 "repository": {

41 "type": "git",

42 "url": "git+https://github.com/gowalk-public/claude-multiacc.git"

43 },

44 "homepage": "https://github.com/gowalk-public/claude-multiacc#readme",

45 "bugs": {

46 "url": "https://github.com/gowalk-public/claude-multiacc/issues"

47 },

48 "publishConfig": {

49 "access": "public"

50 },

51 "engines": {

52 "node": ">=18"

53 },

54 "scripts": {

55 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L55

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L55

56 "test": "bash tests/run-tests.sh && python3 tests/test_selector.py"

57 },

58 "dependencies": {

59 "update-notifier": "^7.3.1"

60 }

Medium

Suspicious Lifecycle Evidence

The package defines a postinstall hook that runs its installer.

package.jsonView on unpkg · L55

61}

install.shView file

•path = install.sh kind = build_helper sizeBytes = 22327 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

tests/test_selector.pyView file

•path = tests/test_selector.py kind = payload_in_excluded_dir sizeBytes = 17190 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

tests/test_selector.pyView on unpkg

bin/multiacc-selectView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/multiacc-selectView on unpkg

scripts/postinstall.mjsView file

Lines 3-33javascript

3// running install.sh (idempotent), so `npm i -g claude-multiacc@latest` fully updates

4// the shim, CLI, and scheduled jobs with no extra step. Deliberately best-effort:

5// npm's own CI, sandboxes, and non-global/dev installs must never be broken by it, and

6// a failed install.sh must not fail `npm install` — it only prints how to finish by hand.

7import { spawnSync } from 'node:child_process';

8import { fileURLToPath } from 'node:url';

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

55"postinstall": "node scripts/postinstall.mjs", "test": "bash tests/run-tests.sh && python3 tests/test_selector.py" }, "dependencies": { "update-notifier": "^7.3.1" }

Medium

Suspicious Lifecycle Evidence

The package defines a postinstall hook that runs its installer.

package.jsonView on unpkg · L55

install.shView file

Findings

3 High6 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighPayload In Excluded Dirtests/test_selector.py

HighSemantic Analysis Limitedbin/multiacc-select

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helperinstall.sh

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

MediumAi Review Evidencescripts/postinstall.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to claude-multiacc@2.0.6.

See all versions of claude-multiacc for other recorded verdicts.

Review the evidence and your use of claude-multiacc@2.0.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 16:15:47.205Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code