registry / iclavue / 10.9.6

iclavue@10.9.6

⚠ Under review

Clavue: execution-first AI coding CLI with direct repo tools, provider routing, native workflows, MCP integration, and long-session recovery

Static Scan Results

scanned 3mo ago · by rust-scanner

Static analysis flagged 22 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 7 file(s), 864 KB of source, external domains: api.anthropic.com, api.example.com, api.kimi.com, api.minimaxi.com, gateway.example.com, json-schema.org, open.bigmodel.cn, openrouter.ai

Oversized source lightweight scan

dist/cli.js16.8 MB file, sampled 256 KB

ChildProcessEnvironmentVarsHighEntropyStringsMinified

dist/openai-responses-adapter.js2.34 MB file, sampled 256 KB

ChildProcessEnvironmentVarsHighEntropyStringsMinifiedUrlStrings

Source & flagged code

11 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall-pager.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/mao-command.jsView file

4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO... L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos... L6: `,"utf8"),process4.platform!=="win32")try{fs.chmodSync(filePath,384)}catch{}}__name(defaultWriteJsonFile,"defaultWriteJsonFile");function defaultSafeReadFile(filePath){try{return f...

High

Child Process

Package source references child process execution.

dist/mao-command.jsView on unpkg · L4

dist/openai-responses-adapter.jsView file

3// clavue v10.9.6 openai-responses-adapter (built from source) L4: var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO... L5: `):[]}};_LineDecoder_buffer=new WeakMap,_LineDecoder_carriageReturnIndex=new WeakMap;LineDecoder.NEWLINE_CHARS=new Set([` ... L42: new Anthropic({ apiKey, dangerouslyAllowBrowser: true }); L43: `);this.baseURL=options.baseURL,this.timeout=options.timeout??_a.DEFAULT_TIMEOUT,this.logger=options.logger??console;let defaultLogLevel="warn";this.logLevel=defaultLogLevel,this.l... L44: `)&&(message=jsonStringify(message));let output=`${new Date().toISOString()} [${level.toUpperCase()}] ${message.trim()} ... L66: `,firstNewlineIndex+1),stackW

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/openai-responses-adapter.jsView on unpkg · L3

•matchType = previous_version_dangerous_delta matchedPackage = iclavue@10.8.17 matchedIdentity = npm:aWNsYXZ1ZQ:10.8.17 similarity = 0.857 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/openai-responses-adapter.jsView on unpkg

51`+prefix),args.push(colorCode+"m+"+module2.exports.humanize(this.diff)+"\x1B[0m")}else args[0]=getDate()+name+" "+args[0]}__name(formatArgs,"formatArgs");function getDate(){return ... L52: `)}__name(log,"log");function save(namespaces){namespaces?process.env.DEBUG=namespaces:delete process.env.DEBUG}__name(save,"save");function load2(){return process.env.DEBUG}__name... L53: `).map(str=>str.trim()).join(" ")};formatters.O=function(v){return this.inspectOpts.colors=this.useColors,util4.inspect(v,this.inspectOpts)}}});var require_src=__commonJS({"../../n... L54: `).some(l=>l.indexOf("(https.js:")!==-1||l.indexOf("node:https:")!==-1)}__name(isSecureEndpoint,"isSecureEndpoint");function createAgent(callback,opts){return new createAgent.Agent... ... L66: `,firstNewlineIndex+1),stackWithout

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/openai-responses-adapter.jsView on unpkg · L51

53`).map(str=>str.trim()).join(" ")};formatters.O=function(v){return this.inspectOpts.colors=this.useColors,util4.inspect(v,this.inspectOpts)}}});var require_src=__commonJS({"../../n... L54: `).some(l=>l.indexOf("(https.js:")!==-1||l.indexOf("node:https:")!==-1)}__name(isSecureEndpoint,"isSecureEndpoint");function createAgent(callback,opts){return new createAgent.Agent... L55: \r ... L58: `;proxy.auth&&(headers["Proxy-Authorization"]=`Basic ${Buffer.from(proxy.auth).toString("base64")}`);let{host,port,secureEndpoint}=opts;isDefaultPort(port,secureEndpoint)||(host+=`... L59: `;let proxyResponsePromise=parse_proxy_response_1.default(socket);socket.write(`${payload}\r L60: `);let{statusCode,buffered}=yield proxyResponsePromise;if(statusCode===200){if(req.once("socket",resume2),opts.secureE

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/openai-responses-adapter.jsView on unpkg · L53

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/openai-responses-adapter.jsView on unpkg · L3

dist/native/clavue-pager-win32-x64.exeView file

•path = dist/native/clavue-pager-win32-x64.exe kind = native_binary sizeBytes = 4562460 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/clavue-pager-win32-x64.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6417 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

dist/cli.jsView file

•path = dist/cli.js kind = oversized_source_file sizeBytes = 17585888 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.jsView on unpkg

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 17585888 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-pager.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/mao-command.jsView file

High

Child Process

Package source references child process execution.

dist/mao-command.jsView on unpkg · L4

dist/openai-responses-adapter.jsView file

Findings

2 Critical6 High8 Medium6 Low

CriticalCredential Exfiltrationdist/openai-responses-adapter.js

CriticalPrevious Version Dangerous Deltadist/openai-responses-adapter.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/mao-command.js

HighShell

HighSame File Env Network Executiondist/openai-responses-adapter.js

HighCommand Output Exfiltrationdist/openai-responses-adapter.js

HighCloud Metadata Accessdist/openai-responses-adapter.js

MediumDynamic Require

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarydist/native/clavue-pager-win32-x64.exe

Medium

Affected versions and remediation

This report applies to iclavue@10.9.6.

See all versions of iclavue for other recorded verdicts.

Review the evidence and your use of iclavue@10.9.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-21 09:40:51.810Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.