Loading npm security reports…

claudeputer@1.1.72: Manual Review npm security report (Allow) | LPM Firewall

registry / claudeputer / 1.1.72

claudeputer@1.1.72

⚠ Under review

Client for managing Claude Code and Codex sessions

AI Security Review

scanned 11d ago · by lpm-firewall-ai

Inspected install and session code shows package-local binary unpacking and user-started Claude hook settings, not a confirmed attack. A clean decision cannot be published because required citation coverage exceeds the eight-citation limit.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Citation capacity blocks mark_clean after source inspection; no separate attack trigger was established.

Impact

No confirmed malicious impact. Remaining uncertainty is incomplete citation coverage of every required path, not an observed exploit chain.

Mechanism

postinstall unpacks bundled archives inside the package, and session start writes temporary hook settings under the app home directory for a local Claude process.

AI rationale

The inspected lifecycle and agent paths are consistent with a session client that unpacks local tools and applies temporary Claude hook settings only when the user starts a session. A clean verdict is not allowed because eighteen required citations cannot fit in eight sourceCitations entries.

Decision evidence

public snapshot

AI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json postinstall only runs scripts/unpack-tools.cjs; there is no preinstall or install script.
unpack-tools extracts bundled difftastic and ripgrep archives into the package tools directory for the current platform.

Source & flagged code

23 flagged

package.jsonView file

Lines 50-90json

50 "bin",

51 "scripts",

52 "tools/archives",

53 "tools/licenses",

54 "package.json"

55 ],

56 "scripts": {

57 "why do we need to build before running tests / dev?": "We need the binary to be built so we run daemon commands which directly run the binary - we don't want them to go out of sync or have custom spawn logic depending how we started happy",

58 "typecheck": "tsc --noEmit",

59 "build": "shx rm -rf dist && tsc --noEmit && pkgroll",

60 "test": "$npm_execpath run test:unit",

61 "test:unit": "$npm_execpath run build && cross-env HAPPY_SKIP_TEST_BUILD=1 vitest run --project unit",

62 "test:integration": "$npm_execpath run build && cross-env HAPPY_SKIP_TEST_BUILD=1 vitest run --project integration-empty --project integration-authenticated",

63 "test:all": "$npm_execpath run build && cross-env HAPPY_SKIP_TEST_BUILD=1 vitest run",

64 "start": "$npm_execpath run build && node ./bin/happy.mjs",

65 "cli": "tsx src/index.ts",

66 "dev": "tsx src/index.ts",

67 "dev:local-server": "$npm_execpath run build && tsx --env-file .env.dev-local-server src/index.ts",

68 "prepublishOnly": "$npm_execpath run test:unit",

69 "release": "npx --no-install release-it",

70 "postinstall": "node scripts/unpack-tools.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L70

71 "// ==== Dev/Stable Variant Management ====": "echo comment",

72 "stable": "node scripts/env-wrapper.cjs stable",

73 "dev:variant": "node scripts/env-wrapper.cjs dev",

74 "// ==== Stable Version Quick Commands ====": "echo comment",

75 "stable:daemon:start": "node scripts/env-wrapper.cjs stable daemon start",

76 "stable:daemon:stop": "node scripts/env-wrapper.cjs stable daemon stop",

77 "stable:daemon:status": "node scripts/env-wrapper.cjs stable daemon status",

78 "stable:auth": "node scripts/env-wrapper.cjs stable auth",

79 "// ==== Development Version Quick Commands ====": "echo comment",

80 "dev:daemon:start": "node scripts/env-wrapper.cjs dev daemon start",

81 "dev:daemon:stop": "node scripts/env-wrapper.cjs dev daemon stop",

82 "dev:daemon:status": "node scripts/env-wrapper.cjs dev daemon status",

83 "dev:auth": "node scripts/env-wrapper.cjs dev auth",

84 "// ==== Setup ====": "echo comment",

85 "setup:dev": "node scripts/setup-dev.cjs",

86 "doctor": "node scripts/env-wrapper.cjs stable doctor",

87 "// ==== Development Linking ====": "echo comment",

88 "link:dev": "node scripts/link-dev.cjs",

89 "unlink:dev": "node scripts/link-dev.cjs unlink"

90 },

bin/happy-dev.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

3import { execFileSync } from 'child_process';

4import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/happy-dev.mjsView on unpkg · L2

5import { join, dirname } from

dist/index-BBKQOJBH.cjsView file

11793L11794: const execAsync = util.promisify(child_process.exec); L11795: const CLIENT_ID = "681255809395-[redacted].apps.googleusercontent.com";

High

Shell

Package source references shell execution.

dist/index-BBKQOJBH.cjsView on unpkg · L11793

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index-BBKQOJBH.cjs: var node_readline = require('node:readline'); this.claudeEnvVars = opts.claudeEnvVars; this.claudeArgs = opts.claudeArgs; this.claudeGoalStatusCallbacks = []; claudePromptCache: metadata.claudeSessionId === sessionId ? metadata.claudePromptCache : void 0 metadata?.claudeSessionId ?? this.sessionId, for (const callback of this.claudeGoalStatusCallbacks) { this.claudeGoalStatusCallbacks.push(callback);

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-BBKQOJBH.cjsView on unpkg

6Cross-file remote execution chain: dist/index-BBKQOJBH.cjs spawns scripts/claude_local_launcher.cjs; helper contains network access plus dynamic code execution. L6: var persistence = require('./types-CAPVU7Z8.cjs'); L7: var node_child_process = require('node:child_process'); L8: var node_path = require('node:path'); ... L16: var node_url = require('node:url'); L17: var axios = require('axios'); L18: require('node:events'); ... L448: const projectId = node_path.resolve(workingDirectory).replace(/[^a-zA-Z0-9-]/g, "-"); L449: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || node_path.join(os.homedir(), ".claude"); L450: return node_path.join(claudeConfigDir, "projects", projectId); ... L464: try { L465: const parsed = JSON.parse(v); L466: return typeof parsed.uuid === "string" && pars

dist/lib.cjsView file

Lines 1-22javascript

1'use strict';

3var persistence = require('./types-CAPVU7Z8.cjs');

4require('axios');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lib.cjsView on unpkg · L2

5require('chalk');

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/index-vlLRYUnK.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-vlLRYUnK.mjsView on unpkg

dist/config-BnA9rVsY.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = claudeputer@1.1.71 matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.71 similarity = 0.783 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/config-BnA9rVsY.cjsView on unpkg

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/config-PxyM2qqi.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-BnA9rVsY.cjsView on unpkg

dist/runGemini-B5AhrQty.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/runGemini-DFaFvFE0.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-B5AhrQty.cjsView on unpkg

scripts/env-wrapper.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.21 matchedPath = scripts/env-wrapper.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.21 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

dist/index.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/index.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 40 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/runOpenClaw-DvGPG5w6.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/runOpenClaw-BriywXHV.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runOpenClaw-DvGPG5w6.cjsView on unpkg

scripts/statusline_forwarder.cjsView file

•matchType = normalized_sha256 matchedPackage = claudeputer@1.1.41 matchedPath = scripts/statusline_forwarder.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/statusline_forwarder.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.21 matchedPath = scripts/claude_local_launcher.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.21 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

dist/lib.mjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/lib.mjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 42 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.mjsView on unpkg

dist/index.mjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/index.mjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 0.875 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.mjsView on unpkg

Source & flagged code

23 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/unpack-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/happy-dev.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/happy-dev.mjsView on unpkg · L2

dist/index-BBKQOJBH.cjsView file

11793L11794: const execAsync = util.promisify(child_process.exec); L11795: const CLIENT_ID = "681255809395-[redacted].apps.googleusercontent.com";

High

Shell

Package source references shell execution.

dist/index-BBKQOJBH.cjsView on unpkg · L11793

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-BBKQOJBH.cjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-BBKQOJBH.cjsView on unpkg · L6

6Trigger-reachable persistence chain: manifest.main -> dist/index.cjs -> dist/index-BBKQOJBH.cjs L6: var persistence = require('./types-CAPVU7Z8.cjs'); L7: var node_child_process = require('node:child_process'); L8: var node_path = require('node:path'); ... L16: var node_url = require('node:url'); L17: var axios = require('axios'); L18: require('node:events'); ... L448: const projectId = node_path.resolve(workingDirectory).replace(/[^a-zA-Z0-9-]/g, "-"); L449: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || node_path.join(os.homedir(), ".claude"); L450: return node_path.join(claudeConfigDir, "projects", projectId); ... L464: try { L465: const parsed = JSON.parse(v); L466: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index-BBKQOJBH.cjsView on unpkg · L6

6var persistence = require('./types-CAPVU7Z8.cjs'); L7: var node_child_process = require('node:child_process'); L8: var node_path = require('node:path'); ... L16: var node_url = require('node:url'); L17: var axios = require('axios'); L18: require('node:events'); ... L448: const projectId = node_path.resolve(workingDirectory).replace(/[^a-zA-Z0-9-]/g, "-"); L449: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || node_path.join(os.homedir(), ".claude"); L450: return node_path.join(claudeConfigDir, "projects", projectId); ... L464: try { L465: const parsed = JSON.parse(v); L466: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index-BBKQOJBH.cjsView on unpkg · L6

dist/lib.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/lib.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

2L3: var persistence = require('./types-CAPVU7Z8.cjs'); L4: require('axios');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lib.cjsView on unpkg · L2

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/index-vlLRYUnK.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-vlLRYUnK.mjsView on unpkg

dist/config-BnA9rVsY.cjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/config-BnA9rVsY.cjsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-BnA9rVsY.cjsView on unpkg

dist/runGemini-B5AhrQty.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-B5AhrQty.cjsView on unpkg

scripts/env-wrapper.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

dist/index.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/runOpenClaw-DvGPG5w6.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runOpenClaw-DvGPG5w6.cjsView on unpkg

scripts/statusline_forwarder.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/statusline_forwarder.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

dist/lib.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.mjsView on unpkg

dist/index.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.mjsView on unpkg