Loading npm security reports…

litclaude-ai@0.3.44: AI-agent control-surface risk | LPM Firewall

registry / litclaude-ai / 0.3.44

litclaude-ai@0.3.44

Claude Code-native workflow distribution.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On global npm installation, the lifecycle script automatically installs and enables a LitClaude Claude Code plugin. It mutates Claude's shared plugin registry and global settings, including replacing the status-line command.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm global install runs postinstall

Impact

An npm install changes a separate AI-agent control surface and causes its plugin command to run as Claude's status line.

Mechanism

automatic Claude Code plugin registration and global settings/statusLine mutation

Policy narrative

A global npm install runs postinstall, which launches the installer automatically. The installer copies its plugin into Claude's configuration area, enables it in global settings, registers a marketplace, and replaces the existing status-line configuration with a package-controlled Node command. This is an unconsented install-time mutation of a foreign AI-agent control surface.

Rationale

The package performs concrete automatic postinstall writes to Claude Code's global configuration and overrides its status line. Guard conditions and an npm update check do not remove that install-time control-surface mutation.

Evidence

package.jsonscripts/postinstall.mjsbin/litclaude-ai.jsbin/update-notifier.mjs~/.claude/settings.json~/.claude/plugins/installed_plugins.json~/.claude/plugins/known_marketplaces.json~/.claude/plugins/cache/litclaude-ai/litclaude/0.3.44

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/qa-uiux-visual-qa-scenarios.mjsView file

83const fixtureBytes = await bounded(fixturesRoot, "scenarios.json"); L84: const strict = await import(pathToFileURL(join(installedRoot, "lib/strict-json.mjs")).href); L85: const tui = await import(pathToFileURL(

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/qa-uiux-visual-qa-scenarios.mjsView on unpkg · L83

plugins/litclaude/skills/deep-interview/scripts/render_progress.pyView file

•path = plugins/litclaude/skills/deep-interview/scripts/render_progress.py kind = build_helper sizeBytes = 7185 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/litclaude/skills/deep-interview/scripts/render_progress.pyView on unpkg

plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.pyView file

•path = plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.py kind = payload_in_excluded_dir sizeBytes = 1742 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.pyView on unpkg

plugins/litclaude/skills/visual-qa/scripts/png-crc.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

plugins/litclaude/skills/visual-qa/scripts/png-crc.tsView on unpkg

plugins/litclaude/skills/programming/scripts/typescript/check-no-excuse-rules.tsView file

•matchType = normalized_sha256 matchedPackage = @kl-c/matrixos@0.3.65 matchedPath = [redacted]-no-excuse-rules.ts matchedIdentity = npm:QGtsLWMvbWF0cml4b3M:0.3.65 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/skills/programming/scripts/typescript/check-no-excuse-rules.tsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 11-51json

11 "bin",

12 "docs/agents.md",

13 "docs/hooks.md",

14 "docs/lsp.md",

15 "docs/migration.md",

16 "docs/native-goal-surface.md",

17 "docs/rules.md",

18 "docs/workflow-compatibility-audit.md",

19 "plugins",

20 "!plugins/**/.litclaude/**",

21 "scripts",

22 "README.md",

23 "README_ko-KR.md",

24 "CHANGELOG.md",

25 "cover.png",

26 "generate_cover.py",

27 "RELEASE_CHECKLIST.md",

28 "LICENSE"

29 ],

30 "scripts": {

31 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L31

32 "test": "node --test --test-concurrency=1 test/*.test.mjs",

33 "validate:plugin": "node scripts/validate-plugin.mjs",

34 "doctor": "node scripts/doctor.mjs",

35 "qa:tmux": "bash scripts/qa-claude-plugin-smoke.sh",

36 "qa:portable": "bash scripts/qa-portable-install.sh",

37 "qa:matrix": "node scripts/qa-negative-gate-matrix.mjs",

38 "qa:matrix-negative-control": "node scripts/qa-negative-gate-matrix.mjs --negative-control",

39 "qa:tamper": "node scripts/qa-installed-tamper-repair.mjs",

40 "qa:behaviors": "node scripts/qa-real-surface-behaviors.mjs",

41 "qa:real-surface": "npm run qa:matrix && npm run qa:tamper && npm run qa:behaviors",

42 "pack:dry-run": "npm pack --dry-run",

43 "scan:legacy-tokens": "node tools/scan-legacy-tokens.mjs",

44 "check:version": "node tools/check-version-lockstep.mjs",

45 "assert:ci": "node tools/assert-ci-workflow.mjs",

46 "pack:payload-guard": "node tools/check-pack-payload.mjs",

47 "gen:runtime-closures": "node tools/gen-canonical-runtime-closures.mjs",

48 "check:runtime-closures": "node tools/gen-canonical-runtime-closures.mjs --check",

49 "gen:skill-resources": "node tools/gen-canonical-skill-resources.mjs",

50 "check:skill-resources": "node tools/gen-canonical-skill-resources.mjs --check"

51 },

scripts/qa-uiux-visual-qa-scenarios.mjsView file

Lines 63-103javascript

63 return result;

64}

65

66async function bounded(root, name, maximum = 1024 * 1024) {

plugins/litclaude/skills/deep-interview/scripts/render_progress.pyView file

•path = plugins/litclaude/skills/deep-interview/scripts/render_progress.py kind = build_helper sizeBytes = 7185 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/litclaude/skills/deep-interview/scripts/render_progress.pyView on unpkg

plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.pyView file

•path = plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.py kind = payload_in_excluded_dir sizeBytes = 1742 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.pyView on unpkg

plugins/litclaude/skills/visual-qa/scripts/png-crc.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

plugins/litclaude/skills/visual-qa/scripts/png-crc.tsView on unpkg

plugins/litclaude/skills/programming/scripts/typescript/check-no-excuse-rules.tsView file

•matchType = normalized_sha256 matchedPackage = @kl-c/matrixos@0.3.65 matchedPath = [redacted]-no-excuse-rules.ts matchedIdentity = npm:QGtsLWMvbWF0cml4b3M:0.3.65 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/skills/programming/scripts/typescript/check-no-excuse-rules.tsView on unpkg