Loading npm security reports…

claudeputer@1.1.60: Manual Review npm security report (Allow) | LPM Firewall

registry / claudeputer / 1.1.60

claudeputer@1.1.60

⚠ Under review

Mobile and Web client for Claude Code and Codex (fork of happy)

AI Security Review

scanned 16d ago · by lpm-firewall-ai

No confirmed attack surface was established from the install hook, CLI bins, and launchers that were read. A clean publication decision still cannot be completed because eighteen required citation paths exceed the eight-citation limit.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall runs scripts/unpack-tools.cjs; the CLI runs only when the user invokes the bin.

Impact

Install writes binaries only inside the package tools directory. Remaining unread required paths leave citation coverage incomplete, not a demonstrated compromise.

Mechanism

Postinstall gunzips platform tar archives of difftastic and ripgrep into tools/unpacked and marks non-node files executable. It does not fetch remote code or rewrite agent configuration.

AI rationale

Inspected package.json, the postinstall unpacker, and the CLI wrappers show local tool extraction and user-started process relaunch, not a concrete attack. A clean verdict is blocked only because eighteen required source citations cannot fit in the eight-citation limit.

Decision evidence

public snapshot

AI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json names claudeputer 1.1.60 and sets postinstall to node scripts/unpack-tools.cjs, which only extracts bundled difftastic and ripgrep archives into the package tools directory.

Source & flagged code

24 flagged

package.jsonView file

Lines 56-96json

56 "bin",

57 "scripts",

58 "tools/archives",

59 "tools/licenses",

60 "package.json"

61 ],

62 "scripts": {

63 "why do we need to build before running tests / dev?": "We need the binary to be built so we run daemon commands which directly run the binary - we don't want them to go out of sync or have custom spawn logic depending how we started happy",

64 "typecheck": "tsc --noEmit",

65 "build": "shx rm -rf dist && tsc --noEmit && pkgroll",

66 "test": "$npm_execpath run test:unit",

67 "test:unit": "$npm_execpath run build && cross-env HAPPY_SKIP_TEST_BUILD=1 vitest run --project unit",

68 "test:integration": "$npm_execpath run build && cross-env HAPPY_SKIP_TEST_BUILD=1 vitest run --project integration-empty --project integration-authenticated",

69 "test:all": "$npm_execpath run build && cross-env HAPPY_SKIP_TEST_BUILD=1 vitest run",

70 "start": "$npm_execpath run build && node ./bin/happy.mjs",

71 "cli": "tsx src/index.ts",

72 "dev": "tsx src/index.ts",

73 "dev:local-server": "$npm_execpath run build && tsx --env-file .env.dev-local-server src/index.ts",

74 "prepublishOnly": "$npm_execpath run test:unit",

75 "release": "npx --no-install release-it",

76 "postinstall": "node scripts/unpack-tools.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L76

77 "// ==== Dev/Stable Variant Management ====": "echo comment",

78 "stable": "node scripts/env-wrapper.cjs stable",

79 "dev:variant": "node scripts/env-wrapper.cjs dev",

80 "// ==== Stable Version Quick Commands ====": "echo comment",

81 "stable:daemon:start": "node scripts/env-wrapper.cjs stable daemon start",

82 "stable:daemon:stop": "node scripts/env-wrapper.cjs stable daemon stop",

83 "stable:daemon:status": "node scripts/env-wrapper.cjs stable daemon status",

84 "stable:auth": "node scripts/env-wrapper.cjs stable auth",

85 "// ==== Development Version Quick Commands ====": "echo comment",

86 "dev:daemon:start": "node scripts/env-wrapper.cjs dev daemon start",

87 "dev:daemon:stop": "node scripts/env-wrapper.cjs dev daemon stop",

88 "dev:daemon:status": "node scripts/env-wrapper.cjs dev daemon status",

89 "dev:auth": "node scripts/env-wrapper.cjs dev auth",

90 "// ==== Setup ====": "echo comment",

91 "setup:dev": "node scripts/setup-dev.cjs",

92 "doctor": "node scripts/env-wrapper.cjs stable doctor",

93 "// ==== Development Linking ====": "echo comment",

94 "link:dev": "node scripts/link-dev.cjs",

95 "unlink:dev": "node scripts/link-dev.cjs unlink"

96 },

bin/happy-dev.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

3import { execFileSync } from 'child_process';

4import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/happy-dev.mjsView on unpkg · L2

5import { join, dirname } from

dist/types-B0KW8wSq.cjsView file

Lines 1-22javascript

1'use strict';

3var axios = require('axios');

4var chalk = require('chalk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/types-B0KW8wSq.cjsView on unpkg · L2

dist/index-JZ-xS9SO.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = claudeputer@1.1.55 matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.55 similarity = 0.870 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-JZ-xS9SO.cjsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index-JZ-xS9SO.cjs: var node_readline = require('node:readline'); this.claudeEnvVars = opts.claudeEnvVars; this.claudeArgs = opts.claudeArgs; this.claudeGoalStatusCallbacks = []; claudePromptCache: metadata.claudeSessionId === sessionId ? metadata.claudePromptCache : void 0 metadata?.claudeSessionId ?? this.sessionId, for (const callback of this.claudeGoalStatusCallbacks) { this.claudeGoalStatusCallbacks.push(callback);

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-JZ-xS9SO.cjsView on unpkg

6Trigger-reachable persistence chain: manifest.main -> dist/index.cjs -> dist/index-JZ-xS9SO.cjs L6: var persistence = require('./types-B0KW8wSq.cjs'); L7: var node_child_process = require('node:child_process'); L8: var node_path = require('node:path'); ... L16: var node_url = require('node:url'); L17: var axios = require('axios'); L18: require('node:events'); ... L448: const projectId = node_path.resolve(workingDirectory).replace(/[^a-zA-Z0-9-]/g, "-"); L449: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || node_path.join(os.homedir(), ".claude"); L450: return node_path.join(claudeConfigDir, "projects", projectId); ... L464: try { L465: const parsed = JSON.parse(v); L466: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x

dist/index-Da7TiBP8.mjsView file

3Cross-file remote execution chain: dist/index-Da7TiBP8.mjs spawns scripts/claude_local_launcher.cjs; helper contains network access plus dynamic code execution. L3: import { randomUUID, randomBytes, createHash as createHash$1 } from 'node:crypto'; L4: import { l as logger, p as projectPath, f as delay$1, I as InvalidateSync, R as RawJSONLinesSchema, g as claudePromptCacheSchema, c as configuration, h as AsyncLock, u as updateCla... L5: import { spawn, execFile, execSync, execFileSync } from 'node:child_process'; L6: import { resolve, join, isAbsolute, dirname, delimiter, sep, basename, relative } from 'node:path'; ... L11: import fs, { watch, access } from 'fs/promises'; L12: import { useStdout, useInput, Box, Text, render } from 'ink'; L13: import React, { useState, useRef, useEffect, use

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-Da7TiBP8.mjsView on unpkg · L3

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/index-D_VtXzAu.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-D_VtXzAu.mjsView on unpkg

dist/config-pHIdAizg.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/config-PxyM2qqi.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-pHIdAizg.cjsView on unpkg

dist/runGemini-CjUQBQdg.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/runGemini-DFaFvFE0.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-CjUQBQdg.cjsView on unpkg

scripts/env-wrapper.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.21 matchedPath = scripts/env-wrapper.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.21 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

dist/config-C_34Fkd-.mjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/config-lCTXWyPR.mjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-C_34Fkd-.mjsView on unpkg

dist/index.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/index.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 40 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/lib.cjsView file

•matchType = normalized_sha256 matchedPackage = claudeputer@1.1.41 matchedPath = dist/lib.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

dist/runOpenClaw-B9poG6eK.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/runOpenClaw-BriywXHV.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runOpenClaw-B9poG6eK.cjsView on unpkg

scripts/statusline_forwarder.cjsView file

•matchType = normalized_sha256 matchedPackage = claudeputer@1.1.41 matchedPath = scripts/statusline_forwarder.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/statusline_forwarder.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.21 matchedPath = scripts/claude_local_launcher.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.21 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

dist/index.mjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/index.mjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 40 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.mjsView on unpkg

dist/lib.mjsView file

•matchType = normalized_sha256 matchedPackage = claudeputer@1.1.41 matchedPath = dist/lib.mjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.mjsView on unpkg

Source & flagged code

24 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/unpack-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/happy-dev.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/happy-dev.mjsView on unpkg · L2

dist/types-B0KW8wSq.cjsView file

1383L1384: const execAsync = util.promisify(child_process.exec); L1385: function registerCommonHandlers(rpcHandlerManager, workingDirectory) {

High

Shell

Package source references shell execution.

dist/types-B0KW8wSq.cjsView on unpkg · L1383

2L3: var axios = require('axios'); L4: var chalk = require('chalk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/types-B0KW8wSq.cjsView on unpkg · L2

dist/index-JZ-xS9SO.cjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-JZ-xS9SO.cjsView on unpkg

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-JZ-xS9SO.cjsView on unpkg

dist/index-Da7TiBP8.mjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-Da7TiBP8.mjsView on unpkg · L3

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/index-D_VtXzAu.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-D_VtXzAu.mjsView on unpkg

dist/config-pHIdAizg.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-pHIdAizg.cjsView on unpkg

dist/runGemini-CjUQBQdg.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-CjUQBQdg.cjsView on unpkg

scripts/env-wrapper.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

dist/config-C_34Fkd-.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-C_34Fkd-.mjsView on unpkg

dist/index.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/lib.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

dist/runOpenClaw-B9poG6eK.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runOpenClaw-B9poG6eK.cjsView on unpkg

scripts/statusline_forwarder.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/statusline_forwarder.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

dist/index.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.mjsView on unpkg

dist/lib.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.mjsView on unpkg