registry / claude-rpc / 1.1.2

claude-rpc@1.1.2

Discord Rich Presence for Claude Code — live model, project, tokens, and lifetime stats driven by Claude Code's hook system.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 50 file(s), 617 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, cdn.qualit.ly, claude-rpc-totals.claude-rpc.workers.dev, claude-rpc.com, claude.com, gist.github.com, github.com, nodejs.org, www.apple.com, www.w3.org

Source & flagged code

6 flagged

src/notify.jsView file

Lines 1-29javascript

1// Outbound side-effects on status transitions: a native desktop notification

2// (so a permission prompt isn't missed) and a fire-and-forget status webhook

3// (Slack / Discord channel / custom). Both best-effort — they must never throw

4// into the daemon's render loop. The decision helpers are pure + tested.

6import { spawn } from 'node:child_process';

7import { platform } from 'node:os';

High

Child Process

Package source references child process execution.

src/notify.jsView on unpkg · L5

9/**

10 * Strip shell/PowerShell metacharacters from a label before it's interpolated

11 * into a notifier command or webhook body. The win32 path below puts text

High

Shell

Package source references shell execution.

src/notify.jsView on unpkg · L9

12 * inside a double-quoted PowerShell string, where `$(...)` and backtick are

13 * evaluated and JSON.stringify escapes neither — so an unsanitized project

14 * name (a directory literally named `x$(calc.exe)`) could execute. Allow only

15 * unicode letters/numbers + space/._- : plenty for a readable label, and it

16 * neutralizes the PowerShell, osascript, and webhook sinks alike. Callers

17 * passing any cwd-derived text MUST run it through this first.

18 * @param {string} s

19 * @returns {string}

20 */

21export function sanitizeLabel(s) {

22 return String(s || '').replace(/[^\p{L}\p{N} ._-]/gu, '');

23}

25/**

26 * Best-effort native desktop notification (osascript / PowerShell / notify-send).

27 * Never throws — a missing notifier binary is swallowed.

28 * @param {string} title - Notification title.

29 * @param {string} [body] - Notification body text.

src/install.jsView file

Lines 1-31javascript

1// One-shot installer logic invoked by the bundled exe.

2// Seeds %APPDATA%\claude-rpc\config.json, points Claude Code's hooks at the

3// exe, and registers a Windows startup entry so the daemon comes up on login.

5import {

6 existsSync, mkdirSync, readFileSync, writeFileSync,

7 copyFileSync, chmodSync, renameSync, statSync,

8 readdirSync, unlinkSync,

9} from 'node:fs';

10import { dirname, join, resolve } from

src/server/index.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2// Local web dashboard for Claude RPC.

3//

4// Split layout (since the v0.4 refactor):

5// server/index.js — this file: HTTP lifecycle, request dispatch, SIGINT

6// server/api.js — data helpers (snapshot, windowedAggregate, drilldowns)

7// server/routes.js — declarative /api/* route table

8// server/sse.js — SSE broadcast + file watchers

9// server/page.js — all browser-side assets (HTML/CSS/JS strings)

10//

11// Zero deps, vanilla browser JS, SVG charts. Designed to run alongside the

src/usage.jsView file

Lines 1-23javascript

1// Subscription usage — the exact numbers Claude Code's /usage screen shows

2// (5-hour session window %, weekly %, per-model weekly buckets).

3//

4// Source: GET https://api.anthropic.com/api/oauth/usage, authenticated with

5// the SAME OAuth access token Claude Code itself uses — read from

6// ~/.claude/.credentials.json (Linux/Windows) or the login keychain (macOS).

7// The token is sent ONLY to api.anthropic.com — its issuer — never logged,

8// never stored anywhere else, never forwarded (SECURITY.md §3d). Strictly

9// read-only: the refresh token is never touched (refresh rotation could

10// corrupt Claude Code's own session), so an expired access token just means

src/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = claude-rpc@1.1.0 matchedIdentity = npm:Y2xhdWRlLXJwYw:1.1.0 similarity = 0.776 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli.jsView on unpkg

Source & flagged code

6 flagged · loading source

src/notify.jsView file

5L6: import { spawn } from 'node:child_process'; L7: import { platform } from 'node:os';

High

Child Process

Package source references child process execution.

src/notify.jsView on unpkg · L5

9/** L10: * Strip shell/PowerShell metacharacters from a label before it's interpolated L11: * into a notifier command or webhook body. The win32 path below puts text

High

Shell

Package source references shell execution.

src/notify.jsView on unpkg · L9

src/install.jsView file

11import { homedir } from 'node:os'; L12: import { spawn, spawnSync } from 'node:child_process'; L13: import { randomUUID } from 'node:crypto'; ... L62: function readJson(p, fb) { L63: try { return JSON.parse(readFileSync(p, 'utf8')); } L64: catch { return fb; } ... L96: // dev → `node "<src/hook.js>" <event>` (cloned-source iteration) L97: // Hook commands must resolve under Claude Code's hook shell — `/bin/sh` with a L98: // minimal PATH that, under nvm, has neither `claude-rpc` nor `node` on it (no ... L149: let err = ''; L150: proc.stderr.on('data', (d) => err += d.toString()); L151: proc.on('error', reject);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/install.jsView on unpkg · L11

src/server/index.jsView file

13L14: import { createServer } from 'node:http'; L15: import { exec } from 'node:child_process'; L16: import { ROUTES, JSON_HEADERS } from './routes.js'; ... L22: // (used in a breadcrumb), which is fixed for the life of the daemon. L23: const HTML = buildHtml({ port: Number(process.env.CLAUDE_RPC_PORT) || 47474 }); L24: const WRAPPED_HTML = buildWrappedHtml();

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/server/index.jsView on unpkg · L13

src/usage.jsView file

3// L4: // Source: GET https://api.anthropic.com/api/oauth/usage, authenticated with L5: // the SAME OAuth access token Claude Code itself uses — read from ... L18: import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs'; L19: import { spawnSync } from 'node:child_process'; L20: import { join, dirname } from 'node:path'; ... L37: if (existsSync(p)) { L38: const o = JSON.parse(readFileSync(p, 'utf8')); L39: if (o?.claudeAiOauth?.accessToken) return o.claudeAiOauth; ... L41: } catch { /* unreadable → try the keychain below */ } L42: if (process.platform === 'darwin') { L43: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/usage.jsView on unpkg · L3

src/cli.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli.jsView on unpkg

Findings

5 High4 Medium4 Low

HighChild Processsrc/notify.js

HighShellsrc/notify.js

HighSame File Env Network Executionsrc/server/index.js

HighSandbox Evasion Gated Capabilitysrc/usage.js

HighPrevious Version Dangerous Deltasrc/cli.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencesrc/install.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

src/notify.jsView file

Lines 1-29javascript

1// Outbound side-effects on status transitions: a native desktop notification

2// (so a permission prompt isn't missed) and a fire-and-forget status webhook

3// (Slack / Discord channel / custom). Both best-effort — they must never throw

4// into the daemon's render loop. The decision helpers are pure + tested.

6import { spawn } from 'node:child_process';

7import { platform } from 'node:os';

High

Child Process

Package source references child process execution.

src/notify.jsView on unpkg · L5

9/**

10 * Strip shell/PowerShell metacharacters from a label before it's interpolated

11 * into a notifier command or webhook body. The win32 path below puts text

High

Shell

Package source references shell execution.

src/notify.jsView on unpkg · L9

12 * inside a double-quoted PowerShell string, where `$(...)` and backtick are

13 * evaluated and JSON.stringify escapes neither — so an unsanitized project

14 * name (a directory literally named `x$(calc.exe)`) could execute. Allow only

15 * unicode letters/numbers + space/._- : plenty for a readable label, and it

16 * neutralizes the PowerShell, osascript, and webhook sinks alike. Callers

17 * passing any cwd-derived text MUST run it through this first.

18 * @param {string} s

19 * @returns {string}

20 */

21export function sanitizeLabel(s) {

22 return String(s || '').replace(/[^\p{L}\p{N} ._-]/gu, '');

23}

25/**

26 * Best-effort native desktop notification (osascript / PowerShell / notify-send).

27 * Never throws — a missing notifier binary is swallowed.

28 * @param {string} title - Notification title.

29 * @param {string} [body] - Notification body text.

src/install.jsView file

Lines 1-31javascript

1// One-shot installer logic invoked by the bundled exe.

2// Seeds %APPDATA%\claude-rpc\config.json, points Claude Code's hooks at the

3// exe, and registers a Windows startup entry so the daemon comes up on login.

5import {

6 existsSync, mkdirSync, readFileSync, writeFileSync,

7 copyFileSync, chmodSync, renameSync, statSync,

8 readdirSync, unlinkSync,

9} from 'node:fs';

10import { dirname, join, resolve } from

src/server/index.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2// Local web dashboard for Claude RPC.

3//

4// Split layout (since the v0.4 refactor):

5// server/index.js — this file: HTTP lifecycle, request dispatch, SIGINT

6// server/api.js — data helpers (snapshot, windowedAggregate, drilldowns)

7// server/routes.js — declarative /api/* route table

8// server/sse.js — SSE broadcast + file watchers

9// server/page.js — all browser-side assets (HTML/CSS/JS strings)

10//

11// Zero deps, vanilla browser JS, SVG charts. Designed to run alongside the

src/usage.jsView file

Lines 1-23javascript

1// Subscription usage — the exact numbers Claude Code's /usage screen shows

2// (5-hour session window %, weekly %, per-model weekly buckets).

3//

4// Source: GET https://api.anthropic.com/api/oauth/usage, authenticated with

5// the SAME OAuth access token Claude Code itself uses — read from

6// ~/.claude/.credentials.json (Linux/Windows) or the login keychain (macOS).

7// The token is sent ONLY to api.anthropic.com — its issuer — never logged,

8// never stored anywhere else, never forwarded (SECURITY.md §3d). Strictly

9// read-only: the refresh token is never touched (refresh rotation could

10// corrupt Claude Code's own session), so an expired access token just means

src/cli.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli.jsView on unpkg