registry / claude-rtl / 1.0.1

claude-rtl@1.0.1

A smart RTL (Right-to-Left) patcher with UI settings for the Claude application.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 42.0 KB of source, external domains: fonts.gstatic.com, github.com, www.w3.org

Source & flagged code

4 flagged

bin/index.jsView file

Lines 1-68javascript

1#!/usr/bin/env node

2import fs from 'fs';

3import path from 'path';

4import os from 'os';

5import crypto from 'crypto';

6import { fileURLToPath } from 'url';

7import picocolors from 'picocolors';

8import ora from 'ora';

9import prompts from 'prompts';

10import * as asar from '@electron/asar';

11import { execSync } from 'child_process';

12import figlet from 'figlet';

High

Child Process

Package source references child process execution.

bin/index.jsView on unpkg · L10

14const __filename = fileURLToPath(import.meta.url);

15const __dirname = path.dirname(__filename);

16const { blue, cyan, green, red, yellow, bold } = picocolors;

18const pkgPath = path.join(__dirname, '..', 'package.json');

19const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));

21function printBanner() {

22 try {

23 const fullArt = figlet.textSync('Claude RTL', { font: 'RubiFont' }).split('\n');

25 // Claude's official brand terracotta color (#D97757 -> RGB: 217, 119, 87)

26 const r = 217, g = 119, b = 87;

27 const colorPrefix = `\x1b[38;2;${r};${g};${b}m`;

28 const colorSuffix = '\x1b[0m';

30 console.log('');

31 for (const line of fullArt) {

32 if (!line.trim()) continue;

33 console.log(colorPrefix + line + colorSuffix);

34 }

35 console.log('');

36 console.log(`\x1b[2m RTL & UI Patcher for Claude Desktop | ${pkg.version}\x1b[0m\n`);

37 } catch (err) {

38 // Fallback banner

39 console.log(bold(cyan(`\n✨ Claude Smart RTL Patcher v${pkg.version}\n`)));

40 }

41}

43printBanner();

45function handleMacPermissionError(err) {

46 if (os.platform() === 'darwin') {

47 console.error(yellow('\nOn macOS, you can either:'));

48 console.error(yellow(' 1. Grant your terminal "App Management" permission to run without sudo.'));

49 console.error(yellow(' 2. Or, run this command with sudo (e.g. sudo npx claude-rtl)'));

50 console.log(blue('\nOpening System Settings directly to App Management for you...'));

51 try {

52 execSync('open "x-apple.systempreferences:com.apple.settings.PrivacySecurity.extension?Privacy_AppBundles"');

53 console.log(green('✔ Settings opened! Please enable the toggle for your terminal, then try again.\n'));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/index.jsView on unpkg · L48

54 } catch (e) {

55 console.error(yellow('To open manually, go to: System Settings > Privacy & Security > App Management\n'));

56 }

57 }

58}

60function getDefaultPath() {

61 if (os.platform() === 'darwin') {

62 return '/Applications/Claude.app/Contents/Resources/app.asar';

63 } else if (os.platform() === 'win32') {

64 return path.join(process.env.LOCALAPPDATA || '', 'Programs', 'claude', 'resources', 'app.asar');

65 } else {

66 return '/usr/lib/claude-desktop/resources/app.asar'; // placeholder

67 }

68}

Lines 131-171javascript

131

132 const spinner = ora('Checking permissions and backing up...').start();

133 try {

134 fs.accessSync(path.dirname(asarPath), fs.constants.W_OK);

135 if (plistPath) {

136 fs.accessSync(plistPath, fs.constants.W_OK);

137 }

bin/Vazirmatn-Variable.woff2View file

•path = bin/Vazirmatn-Variable.woff2 kind = high_entropy_blob sizeBytes = 111152 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bin/Vazirmatn-Variable.woff2View on unpkg

Source & flagged code

4 flagged · loading source

bin/index.jsView file

10import * as asar from '@electron/asar'; L11: import { execSync } from 'child_process'; L12: import figlet from 'figlet';

High

Child Process

Package source references child process execution.

bin/index.jsView on unpkg · L10

151if (os.platform() === 'win32') { L152: console.error(yellow('\nPlease run your terminal (PowerShell/CMD) as Administrator and try again.\n')); L153: } else if (os.platform() === 'darwin') {

High

Shell

Package source references shell execution.

bin/index.jsView on unpkg · L151

48console.error(yellow(' 1. Grant your terminal "App Management" permission to run without sudo.')); L49: console.error(yellow(' 2. Or, run this command with sudo (e.g. sudo npx claude-rtl)')); L50: console.log(blue('\nOpening System Settings directly to App Management for you...')); L51: try { L52: execSync('open "x-apple.systempreferences:com.apple.settings.PrivacySecurity.extension?Privacy_AppBundles"'); L53: console.log(green('✔ Settings opened! Please enable the toggle for your terminal, then try again.\n'));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/index.jsView on unpkg · L48

bin/Vazirmatn-Variable.woff2View file

•path = bin/Vazirmatn-Variable.woff2 kind = high_entropy_blob sizeBytes = 111152 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bin/Vazirmatn-Variable.woff2View on unpkg

Findings

4 High2 Medium4 Low

HighChild Processbin/index.js

HighShellbin/index.js

HighRuntime Package Installbin/index.js

HighShips High Entropy Blobbin/Vazirmatn-Variable.woff2

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

bin/index.jsView file

Lines 1-68javascript

1#!/usr/bin/env node

2import fs from 'fs';

3import path from 'path';

4import os from 'os';

5import crypto from 'crypto';

6import { fileURLToPath } from 'url';

7import picocolors from 'picocolors';

8import ora from 'ora';

9import prompts from 'prompts';

10import * as asar from '@electron/asar';

11import { execSync } from 'child_process';

12import figlet from 'figlet';

High

Child Process

Package source references child process execution.

bin/index.jsView on unpkg · L10

14const __filename = fileURLToPath(import.meta.url);

15const __dirname = path.dirname(__filename);

16const { blue, cyan, green, red, yellow, bold } = picocolors;

18const pkgPath = path.join(__dirname, '..', 'package.json');

19const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));

21function printBanner() {

22 try {

23 const fullArt = figlet.textSync('Claude RTL', { font: 'RubiFont' }).split('\n');

25 // Claude's official brand terracotta color (#D97757 -> RGB: 217, 119, 87)

26 const r = 217, g = 119, b = 87;

27 const colorPrefix = `\x1b[38;2;${r};${g};${b}m`;

28 const colorSuffix = '\x1b[0m';

30 console.log('');

31 for (const line of fullArt) {

32 if (!line.trim()) continue;

33 console.log(colorPrefix + line + colorSuffix);

34 }

35 console.log('');

36 console.log(`\x1b[2m RTL & UI Patcher for Claude Desktop | ${pkg.version}\x1b[0m\n`);

37 } catch (err) {

38 // Fallback banner

39 console.log(bold(cyan(`\n✨ Claude Smart RTL Patcher v${pkg.version}\n`)));

40 }

41}

43printBanner();

45function handleMacPermissionError(err) {

46 if (os.platform() === 'darwin') {

47 console.error(yellow('\nOn macOS, you can either:'));

48 console.error(yellow(' 1. Grant your terminal "App Management" permission to run without sudo.'));

49 console.error(yellow(' 2. Or, run this command with sudo (e.g. sudo npx claude-rtl)'));

50 console.log(blue('\nOpening System Settings directly to App Management for you...'));

51 try {

52 execSync('open "x-apple.systempreferences:com.apple.settings.PrivacySecurity.extension?Privacy_AppBundles"');

53 console.log(green('✔ Settings opened! Please enable the toggle for your terminal, then try again.\n'));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/index.jsView on unpkg · L48

54 } catch (e) {

55 console.error(yellow('To open manually, go to: System Settings > Privacy & Security > App Management\n'));

56 }

57 }

58}

60function getDefaultPath() {

61 if (os.platform() === 'darwin') {

62 return '/Applications/Claude.app/Contents/Resources/app.asar';

63 } else if (os.platform() === 'win32') {

64 return path.join(process.env.LOCALAPPDATA || '', 'Programs', 'claude', 'resources', 'app.asar');

65 } else {

66 return '/usr/lib/claude-desktop/resources/app.asar'; // placeholder

67 }

68}

Lines 131-171javascript

131

132 const spinner = ora('Checking permissions and backing up...').start();

133 try {

134 fs.accessSync(path.dirname(asarPath), fs.constants.W_OK);

135 if (plistPath) {

136 fs.accessSync(plistPath, fs.constants.W_OK);

137 }

bin/Vazirmatn-Variable.woff2View file

•path = bin/Vazirmatn-Variable.woff2 kind = high_entropy_blob sizeBytes = 111152 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bin/Vazirmatn-Variable.woff2View on unpkg