Loading npm security reports…

litclaude-ai@0.3.46: AI-agent control-surface risk | LPM Firewall

registry / litclaude-ai / 0.3.46

litclaude-ai@0.3.46

Claude Code-native workflow distribution.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On npm postinstall, global installation automatically registers and enables a LitClaude plugin in Claude Code, changes its status-line command, and updates global settings. A later automatic update can install newer package versions into that control surface.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm global install (or LITCLAUDE_AUTO_INSTALL=1); later eligible update lifecycle

Impact

Executes package-supplied Claude plugin/hook content and changes user-wide Claude configuration without requiring an explicit CLI setup command.

Mechanism

unconsented postinstall mutation of Claude Code’s user-wide plugin and settings control surface

Policy narrative

Installing the package globally runs postinstall, which invokes `litclaude-ai install` without an explicit setup command. That command copies the bundled Claude plugin, enables it in the user plugin registry, replaces Claude’s status-line command, and writes package-controlled settings and permission state. Its automatic-update path can subsequently use npm to install a newer version and refresh this managed Claude control surface.

Rationale

The package performs an unconsented postinstall mutation of a foreign, user-wide AI-agent control surface. Registry-only update checking and credential filtering do not mitigate that installation-time behavior.

Evidence

scripts/postinstall.mjsbin/litclaude-ai.jsplugins/litclaude/lib/automatic-update.mjsbin/update-notifier.mjsCLAUDE_CONFIG_DIR/settings.jsonCLAUDE_CONFIG_DIR/plugins/installed_plugins.json

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/qa-uiux-visual-qa-scenarios.mjsView file

83const fixtureBytes = await bounded(fixturesRoot, "scenarios.json"); L84: const strict = await import(pathToFileURL(join(installedRoot, "lib/strict-json.mjs")).href); L85: const tui = await import(pathToFileURL(

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/qa-uiux-visual-qa-scenarios.mjsView on unpkg · L83

plugins/litclaude/skills/deep-interview/scripts/render_progress.pyView file

•path = plugins/litclaude/skills/deep-interview/scripts/render_progress.py kind = build_helper sizeBytes = 7185 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/litclaude/skills/deep-interview/scripts/render_progress.pyView on unpkg

plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.pyView file

•path = plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.py kind = payload_in_excluded_dir sizeBytes = 1742 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.pyView on unpkg

plugins/litclaude/skills/visual-qa/scripts/png-crc.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

plugins/litclaude/skills/visual-qa/scripts/png-crc.tsView on unpkg

plugins/litclaude/lib/automatic-update.mjsView file

•matchType = normalized_sha256 matchedPackage = litclaude-ai@0.3.44 matchedPath = plugins/litclaude/lib/automatic-update.mjs matchedIdentity = npm:bGl0Y2xhdWRlLWFp:0.3.44 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/lib/automatic-update.mjsView on unpkg

bin/update-notifier.mjsView file

•matchType = normalized_sha256 matchedPackage = litclaude-ai@0.3.44 matchedPath = bin/update-notifier.mjs matchedIdentity = npm:bGl0Y2xhdWRlLWFp:0.3.44 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/update-notifier.mjsView on unpkg

bin/litclaude-ai.jsView file

•matchType = normalized_sha256 matchedPackage = litclaude-ai@0.3.44 matchedPath = bin/litclaude-ai.js matchedIdentity = npm:bGl0Y2xhdWRlLWFp:0.3.44 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/litclaude-ai.jsView on unpkg

plugins/litclaude/bin/litclaude-hook.jsView file

•matchType = normalized_sha256 matchedPackage = litclaude-ai@0.3.44 matchedPath = plugins/litclaude/bin/litclaude-hook.js matchedIdentity = npm:bGl0Y2xhdWRlLWFp:0.3.44 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/bin/litclaude-hook.jsView on unpkg

plugins/litclaude/scripts/scaffold-plan.mjsView file

•matchType = normalized_sha256 matchedPackage = litclaude-ai@0.3.44 matchedPath = [redacted]-plan.mjs matchedIdentity = npm:bGl0Y2xhdWRlLWFp:0.3.44 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

plugins/litclaude/scripts/scaffold-plan.mjsView on unpkg