registry / ggk-happy / 1.2.30

ggk-happy@1.2.30

Mobile and Web client for Claude Code and Codex

AI Security Review

scanned 3d ago · by lpm-firewall-ai

Install-time lifecycle code can download, persist, execute, and initialize an external RTK binary without an explicit CLI command from the user. It also sends machine/token-linked RTK telemetry when Happy credentials already exist.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm global install or root install runs postinstall

Impact

Unconsented install-time execution of downloaded tooling, shell profile/PATH modification, and authenticated telemetry from an existing Happy identity.

Mechanism

install hook remote binary installation and telemetry

Attack narrative

During global/root npm install, postinstall unpacks tools and invokes the CLI install command. That path downloads a platform RTK binary from minio.ask-ggk.com, copies it into user-local storage, executes rtk init, may add it to PATH or ~/.zshrc, and reports RTK events/gain data to guguke.ask-ggk.com with existing Happy machine/token identity.

Rationale

The package has legitimate remote-agent functionality, but the install hook crosses the LPM boundary by performing unconsented lifecycle download/execute/persistence and authenticated telemetry rather than waiting for a user-invoked setup command. This is concrete install-hook abuse, not just noisy scanner output. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.

Evidence

package.jsonscripts/postinstall.cjsscripts/unpack-tools.cjsbin/happy.mjsdist/index-BB3s4Iuy.cjstools/unpacked~/.local/share/ggkhappy/rtk%LOCALAPPDATA%/ggkhappy/rtk~/.zshrcuser PATH/Library/LaunchDaemons/com.happy-cli.daemon.plist

Network endpoints5

minio.ask-ggk.com/happy/rtk-x86_64-pc-windows-msvc.zipminio.ask-ggk.com/happy/rtk-x86_64-apple-darwin.tar.gzminio.ask-ggk.com/happy/rtk-x86_64-unknown-linux-musl.tar.gzminio.ask-ggk.com/happy/rtk-aarch64-unknown-linux-gnu.tar.gzguguke.ask-ggk.com/api/v1/agent/rtk/gain/report

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Malware with medium false-positive risk.

Evidence for warning

package.json defines postinstall: node scripts/postinstall.cjs
scripts/postinstall.cjs auto-runs bin/happy.mjs install on global or root installs unless HAPPY_SKIP_AUTO_TAKEOVER is set
dist/index-BB3s4Iuy.cjs install path downloads RTK binaries from minio.ask-ggk.com into user paths and executes rtk init
dist/index-BB3s4Iuy.cjs reports RTK install/gain events to guguke.ask-ggk.com with Happy machineId/token when present
dist/index-BB3s4Iuy.cjs can append RTK bin path to ~/.zshrc on macOS or user PATH on Windows

Evidence against

README documents a remote AI agent controller and authentication flows, so network and child_process use are partly package-aligned
postinstall only auto-takeovers on global/root installs and has HAPPY_SKIP_AUTO_TAKEOVER opt-out
No static evidence of npm token, SSH key, or arbitrary secret harvesting outside its own Happy credentials/RTK telemetry

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 33 file(s), 1.46 MB of source, external domains: 127.0.0.1, accounts.google.com, api.cluster-fluster.com, api.openai.com, auth.openai.com, claude.ai, console.anthropic.com, developers.google.com, github.com, goo.gle, guguke.ask-ggk.com, happy-api.ask-ggk.com, happy.ask-ggk.com, happy.engineering, minio.ask-ggk.com, oauth2.googleapis.com, registry.npmjs.org, www.apple.com, www.googleapis.com

Source & flagged code

12 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/happy.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

7// Check if we're already running with the flags L8: const hasNoWarnings = process.execArgv.includes('--no-warnings'); L9: const hasNoDeprecation = process.execArgv.includes('--no-deprecation');

High

Shell

Package source references shell execution.

bin/happy.mjsView on unpkg · L7

dist/AcpBackend-CJDdgla5.cjsView file

Lines 1-22javascript

1'use strict';

3var node_child_process = require('node:child_process');

4var sdk = require('@agentclientprotocol/sdk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/AcpBackend-CJDdgla5.cjsView on unpkg · L2

5var node_crypto = require(

dist/index-BB3s4Iuy.cjsView file

Lines 1-36javascript

1'use strict';

3var chalk = require('chalk');

4var os = require('node:os');

5var node_crypto = require('node:crypto');

6var persistence = require

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/happy.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

7// Check if we're already running with the flags L8: const hasNoWarnings = process.execArgv.includes('--no-warnings'); L9: const hasNoDeprecation = process.execArgv.includes('--no-deprecation');

High

Shell

Package source references shell execution.

bin/happy.mjsView on unpkg · L7

dist/AcpBackend-CJDdgla5.cjsView file

2L3: var node_child_process = require('node:child_process'); L4: var sdk = require('@agentclientprotocol/sdk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/AcpBackend-CJDdgla5.cjsView on unpkg · L2

dist/index-BB3s4Iuy.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = ggk-happy@1.2.28 matchedIdentity = npm:Z2drLWhhcHB5:1.2.28 similarity = 0.939 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-BB3s4Iuy.cjsView on unpkg

16var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L17: var axios = require('axios'); L18: require('node:events'); ... L21: var os$1 = require('os'); L22: var child_process = require('child_process'); L23: var cuid2 = require('@paralleldrive/cuid2'); ... L152: ...existing, L153: metadata: { L154: ...existing.metadata, ... L234: const projectId = path.resolve(workingDirectory).replace(/[^a-zA-Z0-9-]/g, "-"); L235: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L236: return path.join(claudeConfigDir, "projects", projectId);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index-BB3s4Iuy.cjsView on unpkg · L16

16Cross-file remote execution chain: dist/index-BB3s4Iuy.cjs spawns scripts/claude_local_launcher.cjs; helper contains network access plus dynamic code execution. L16: var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L17: var axios = require('axios'); L18: require('node:events'); ... L21: var os$1 = require('os'); L22: var child_process = require('child_process'); L23: var cuid2 = require('@paralleldrive/cuid2'); ... L152: ...existing, L153: metadata: { L154: ...existing.metadata, ... L234: const projectId = path.resolve(workingDirectory).replace(/[^a-zA-Z0-9-]/g, "-"); L235: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L236: return path.join(claudeConfigDir, "projects", projectId);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-BB3s4Iuy.cjsView on unpkg · L16

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index-BB3s4Iuy.cjsView on unpkg · L16

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

Findings

1 Critical6 High8 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/index-BB3s4Iuy.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/happy.mjs

HighShellbin/happy.mjs

HighSandbox Evasion Gated Capabilitydist/index-BB3s4Iuy.cjs

HighCross File Remote Execution Contextdist/index-BB3s4Iuy.cjs

HighShips High Entropy Blobtools/archives/difftastic-arm64-linux.tar.gz

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/AcpBackend-CJDdgla5.cjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/index-BB3s4Iuy.cjs

MediumShips Build Helperscripts/download-tools.sh

MediumShips Compressed Blobtools/archives/difftastic-arm64-linux.tar.gz

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings