registry / litclaude-ai / 0.3.29

litclaude-ai@0.3.29

Claude Code-native workflow distribution.

AI Security Review

scanned 15d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A global npm install automatically registers the packaged LitClaude extension with Claude Code and installs a HUD command. This is a first-party, package-scoped Claude extension lifecycle action; no exfiltration or remote payload chain was confirmed.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Global npm install (unless skipped), or explicit litclaude install.

Impact

Changes Claude Code configuration and enables package-provided hooks for future Claude sessions.

Mechanism

Copies and registers a Claude Code plugin, hooks, marketplace entry, and status-line command.

Rationale

This is a guarded but automatic first-party Claude extension setup, which warrants a warning under the lifecycle policy. It is not concrete malicious behavior.

Evidence

package.jsonscripts/postinstall.mjsbin/litclaude-ai.jsplugins/litclaude/hooks/hooks.jsonplugins/litclaude/bin/litclaude-hook.jsplugins/litclaude/lib/public-source-reader/validator.mjs$CLAUDE_CONFIG_DIR/plugins/installed_plugins.json$CLAUDE_CONFIG_DIR/plugins/known_marketplaces.json$CLAUDE_CONFIG_DIR/settings.json$CLAUDE_CONFIG_DIR/plugins/cache/litclaude-ai/litclaude/0.3.29$LITCLAUDE_HOME/marketplaces/litclaude-ai

litclaude-ai@0.3.29

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code