registry / litclaude-ai / 0.4.6
litclaude-ai@0.4.6
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has an automatic global postinstall registration path and a session-start self-update path that mutate Claude Code configuration. The code does not show a self-dependency, credential theft, or a non-package-aligned network endpoint, so this is a lifecycle risk rather than confirmed malware.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Global npm installation, then an eligible Claude Code session start or interactive management command.
Impact
Unprompted package code can persist in the user's Claude Code control surface and silently replace itself with a newer release.
Mechanism
Automatic npm installation and mutation of Claude Code plugin and settings files.
AI rationale
The package has an automatic global postinstall registration path and a session-start self-update path that mutate Claude Code configuration. The code does not show a self-dependency, credential theft, or a non-package-aligned network endpoint, so this is a lifecycle risk rather than confirmed malware.
Evidence
package.jsonscripts/postinstall.mjsbin/litclaude-ai.jsplugins/litclaude/bin/litclaude-hook.jsplugins/litclaude/lib/automatic-update.mjsbin/update-notifier.mjs~/.claude/plugins/cache/litclaude-ai~/.claude/plugins/installed_plugins.json~/.claude/plugins/known_marketplaces.json~/.claude/settings.json~/.litclaude
Network endpoints1
registry.npmjs.org/litclaude-ai/latest
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- A postinstall hook automatically runs the package installer during global npm installation.
- The installer modifies Claude Code's plugin registry, settings, HUD, and permission surface.
- A Claude Code session-start hook can trigger a foreground automatic update.
- The update path runs npm exec for a selected newer package version and backs up global Claude configuration files.
- The package contacts the npm registry to obtain update metadata.
Evidence against
- No runtime dependency on litclaude-ai is declared in package.json.
- The observed network endpoint is the npm registry and the response checks the expected package name.
- No credential collection or outbound secret transmission was found in the inspected lifecycle and update code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
17 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgscripts/qa-uiux-visual-qa-scenarios.mjsView file
83const fixtureBytes = await bounded(fixturesRoot, "scenarios.json");
L84: const strict = await import(pathToFileURL(join(installedRoot, "lib/strict-json.mjs")).href);
L85: const tui = await import(pathToFileURL(
Medium
Dynamic Require
Package source references dynamic require/import behavior.
scripts/qa-uiux-visual-qa-scenarios.mjsView on unpkg · L83Findings
14 High6 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPayload In Excluded Dirplugins/litclaude/vendor/045_scientific-visualization/tests/test_figure_export.py
HighSemantic Analysis Limitedbin/litclaude-ai.js#virtual:normalized:round1
HighKnown Malware Source Similarityplugins/litclaude/lib/automatic-update.mjs
HighKnown Malware Source Similaritybin/update-notifier.mjs
HighKnown Malware Source Similarityplugins/litclaude/skills/lsp-setup/scripts/verify-lsp.ts
HighKnown Malware Source Similarityscripts/qa-negative-gate-matrix.mjs
HighKnown Malware Source Similarityplugins/litclaude/skills/programming/scripts/typescript/check-no-excuse-rules.ts
HighKnown Malware Source Similarityscripts/inspect-agent-tools.mjs
Affected versions and remediation
This report applies to litclaude-ai@0.4.6.
See all versions of litclaude-ai for other recorded verdicts.
- Review the evidence and your use of litclaude-ai@0.4.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.