clavue-v1@1.48.3
Clavue v1: lightweight four-slot (main/light/plan/review) multi-model coding CLI on the execution-first engine — overlapped cross-family review, official Clavue cloud preset (api.clavue.com) alongside any Messages-compatible provider, learned context ceil
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe inspected runtime behavior is consistent with package diagnostics sent to its own service and command execution for a requested Mao task. Scanner labels alone do not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Incident reporting follows an error when reporting is enabled; Mao command execution follows a Mao task request.
Impact
The inspected behavior supports product diagnostics and requested task execution; no concrete harmful effect was established.
Mechanism
Incident reports are posted to the package’s Clavue endpoint behind settings and environment controls. Mao launches the configured Codex runtime with argument arrays and task options.
AI rationale
The inspected runtime behavior is consistent with package diagnostics sent to its own service and command execution for a requested Mao task. Scanner labels alone do not establish malicious behavior.
Network endpoints1
api.clavue.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/cli.js as the command-line entrypoint.
- Incident reporting can be disabled through settings or environment flags and sends reports to the package’s Clavue endpoint when enabled.
- The Mao helper launches a command with explicit arguments and working-directory options; its task command uses the Codex exec interface.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
11 flagged · loading sourcedist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,"utf8"),process4.platform!=="win32")try{fs.chmodSync(filePath,384)}catch{}}__name(defaultWriteJsonFile,"defaultWriteJsonFile");function defaultSafeReadFile(filePath){try{return f...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L415${formatCommandFailure(result)}
L16: `}:{type:"text",value:renderJobResult2(completedJob)}}__name(runForegroundJob2,"runForegroundJob");function getStatusJobs2(cwd,limit=8,all=!1){let jobs=listEnrichedJobs(cwd);return...
L17: `,"utf8")}finally{try{await release()}catch{}}return filePath}__name(writeMaoCoordinationLedger,"writeMaoCoordinationLedger");async function acquireLedgerLock(filePath){try{await f...
High
•matchType = normalized_sha256
matchedPackage = iclavue@11.3.5
matchedPath = dist/mao-command.js
matchedIdentity = npm:aWNsYXZ1ZQ:11.3.5
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
1 Critical6 High7 Medium6 Low
CriticalCredential Exfiltrationdist/provider-router.js
HighChild Processdist/mao-command.js
HighShelldist/mao-command.js
HighSame File Env Network Executiondist/provider-router.js
HighCommand Output Exfiltrationdist/provider-router.js
HighCloud Metadata Accessdist/provider-router.js
HighKnown Malware Source Similaritydist/mao-command.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/vendor/ripgrep/x64-darwin/rg
MediumShips Build Helperinstall.sh
MediumOversized Source Filedist/cli.js
Medium
Affected versions and remediation
This report applies to clavue-v1@1.48.3.
See all versions of clavue-v1 for other recorded verdicts.
- Review the evidence and your use of clavue-v1@1.48.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.