registry  /  power-claude  /  3.0.46

power-claude@3.0.46

AI Security Review

scanned 15d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established by source inspection. The package has high-risk, obfuscated CLI/proxy code and can mutate Claude/Power Claude user configuration when invoked, but those behaviors align with its advertised function.

Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm install lifecycle may attempt a missing script; runtime CLI/extension commands activate setup and proxy behavior
Impact
Potentially modifies ~/.power-claude and ~/.claude settings/hooks when setup commands run; install-time script appears broken/missing rather than executing a payload.
Mechanism
obfuscated Claude account-rotation CLI/proxy with user config and hook installation
Rationale
The package is high-risk and opaque because core JS bundles are obfuscated and it has an install hook pointing to a missing script, but inspected behavior is consistent with a Claude rotation/proxy extension and no concrete credential theft, exfiltration, persistence, or destructive payload was confirmed. Treat as suspicious rather than malicious due to obfuscation plus AI-agent/config mutation capability.
Evidence
package.jsonbin/power-claude-cli.jsbin/power-claude-proxy.jsbin/power-claude-rotator.jsscripts/lib/first-run-setup.shscripts/lib/sync-editors.shdata/vendor/jq/manifest.json~/.power-claude/~/.claude/settings.json~/.claude/hooks/rate-limit/~/.claude/state/
Network endpoints4
neural-llm.comapi.neural-llm.com/telemetryneural-llm.com/api/v1/power-claude/manifest.json127.0.0.1:<port>/api/oauth/pool

Decision evidence

public snapshot
AI called this Suspicious at 72.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • package.json defines postinstall: bash scripts/release/merge-drivers/register.sh, but scripts/release is absent from package.
  • bin/power-claude-cli.js, bin/power-claude-proxy.js, and bin/power-claude-rotator.js are heavily obfuscated bundled JS.
  • scripts/lib/first-run-setup.sh can copy hooks/libs into ~/.power-claude and register a Stop hook in ~/.claude/settings.json.
  • Package ships native jq binaries under data/vendor/jq/.
  • package.json documents telemetry and license/update calls to neural-llm endpoints.
Evidence against
  • Missing scripts/release/register.sh means the install lifecycle has no readable payload in this package and likely fails rather than mutates state.
  • CLI/home-dir writes are package-aligned for a Claude account-rotation VS Code/CLI tool and appear user-invoked via first-run/install flows.
  • Network endpoints seen are product/license/telemetry/update or localhost proxy endpoints, not unrelated exfiltration hosts.
  • Telemetry description in package.json states sanitization/redaction and no prompt content or credentials.
  • No confirmed credential exfiltration or destructive behavior found in inspected source paths.
Behavioral surface
Source
ChildProcessCryptoDynamicRequireFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 5 file(s), 1.45 MB of source, external domains: api.anthropic.com, neural-llm.com
Oversized source lightweight scan
bin/power-claude-cli.js2.16 MB file, sampled 256 KB
FilesystemCryptoDynamicRequireObfuscatedHighEntropyStringsMinified
out/extension.js4.87 MB file, sampled 256 KB
FilesystemCryptoDynamicRequireObfuscatedHighEntropyStringsMinifiedUrlStringsneural-llm.com

Source & flagged code

8 flagged · loading source
package.jsonView file
•scripts.postinstall = bash scripts/release/merge-drivers/register.sh
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = bash scripts/release/merge-drivers/register.sh
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg
bin/power-claude-rotator.jsView file
1#!/usr/bin/env node L2: 'use strict';const _0x2226e4=_0x200e;(function(_0x26915e,_0x3715c3){const _0x15a5d8=_0x200e,_0x5b622d=_0x26915e();while(!![]){try{const _0x389e7d=parseInt(_0x15a5d8(0x3b7,'IKne'))/...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

bin/power-claude-rotator.jsView on unpkg · L1
1#!/usr/bin/env node L2: 'use strict';const _0x2226e4=_0x200e;(function(_0x26915e,_0x3715c3){const _0x15a5d8=_0x200e,_0x5b622d=_0x26915e();while(!![]){try{const _0x389e7d=parseInt(_0x15a5d8(0x3b7,'IKne'))/...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/power-claude-rotator.jsView on unpkg · L1
data/vendor/jq/jq-darwin-amd64View file
•path = data/vendor/jq/jq-darwin-amd64 kind = native_binary sizeBytes = 851328 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

data/vendor/jq/jq-darwin-amd64View on unpkg
scripts/emergency/uninstall.shView file
•path = scripts/emergency/uninstall.sh kind = build_helper sizeBytes = 17101 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/emergency/uninstall.shView on unpkg
bin/power-claude-cli.jsView file
•path = bin/power-claude-cli.js kind = oversized_source_file sizeBytes = 2266961 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/power-claude-cli.jsView on unpkg
•path = bin/power-claude-cli.js kind = oversized_cli_entrypoint sizeBytes = 2266961 magicHex = [redacted]
Medium
Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/power-claude-cli.jsView on unpkg

Findings

4 High7 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighObfuscated Payload Loaderbin/power-claude-rotator.js
HighObfuscated
HighOversized Source Filebin/power-claude-cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirebin/power-claude-rotator.js
MediumNetwork
MediumShips Native Binarydata/vendor/jq/jq-darwin-amd64
MediumShips Build Helperscripts/emergency/uninstall.sh
MediumOversized Cli Entrypointbin/power-claude-cli.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License