registry / power-claude / 3.0.92

power-claude@3.0.92

Spend less, run faster, never stall on Claude Code — save $115+/mo vs Max. Local orchestration via official CLI transport; auto-resume, Token Saver, multi-account continuity. Free to start.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package has a broad, obfuscated runtime that handles Claude Code credentials and agent-extension state. Its npm postinstall is inert because both referenced shell scripts are missing from this tarball.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Running the CLI or activating the VS Code extension; lifecycle hooks require an explicit command/configuration action.

Impact

Can overwrite the active Claude credential profile for its account-rotation feature and register package hooks after consent; default inbound-message watching creates an agent-control capability.

Mechanism

Encrypted runtime deployment plus Claude account rotation, local hooks, and AI-agent messaging.

Rationale

Warn rather than block: the install hook is inert, but opaque runtime code and privileged Claude Code credential/configuration handling leave a real agent-extension lifecycle risk. The evidence supports dangerous capability rather than a concrete malicious chain.

Evidence

package.jsonREADME.mdbin/power-claude-cli.jsbin/power-claude-proxy.jsbin/power-claude-rotator.jsout/extension.jsout/uninstall-hook.jsdata/runtime/engine.enc~/.claude/.credentials.json~/.claude/settings.json~/.power-claude/

Network endpoints3

api.anthropic.comapi.anthropic.com/api/oauth/profileneural-llm.com/license/validate

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`bin/power-claude-*.js` and `out/extension.js` are heavily obfuscated.
`bin/power-claude-cli.js` decrypts and installs `data/runtime/engine.enc`.
Runtime code references Claude credentials, settings, hooks, and token material.
`package.json` enables invisible inbound AI-agent message watching by default.
`package.json` documents optional lifecycle-hook registration in `~/.claude/settings.json`.

Evidence against

The only npm `postinstall` targets are absent from the published package, so it exits without mutation.
No packaged install script writes to a foreign AI-agent surface.
Documented license traffic is package-aligned; observed Anthropic URLs support its Claude integration.
Hook installation is described as command-palette opt-in with explicit consent.
No concrete credential exfiltration, destructive command, or remote payload download was confirmed.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 4 file(s), 1.72 MB of source, external domains: api.anthropic.com

Oversized source lightweight scan

bin/power-claude-cli.js3.06 MB file, sampled 256 KB

FilesystemNetworkDynamicRequireObfuscatedHighEntropyStringsMinified

out/extension.js6.24 MB file, sampled 256 KB

FilesystemCryptoDynamicRequireObfuscatedHighEntropyStringsMinified

Source & flagged code

11 flagged

package.jsonView file

Lines 2613-2653json

2613 }

2614 }

2615 }

2616 ],

2617 "keybindings": [

2618 {

2619 "command": "powerClaude.searchSessions",

2620 "key": "ctrl+alt+s",

2621 "mac": "cmd+alt+s",

2622 "when": "workbenchState != empty"

2623 },

2624 {

2625 "command": "powerClaude.searchOpenTabsQuickPick",

2626 "key": "ctrl+alt+shift+s",

2627 "mac": "cmd+alt+shift+s",

2628 "when": "workbenchState != empty"

2629 }

2630 ]

2631 },

2632 "scripts": {

2633 "postinstall": "node -e \"const{existsSync}=require('fs');const{spawnSync}=require('child_process');const steps=['scripts/release/merge-drivers/register.sh','scripts/release/install-bypass-guard.sh'];for (const s of steps){if(!existsSync(s))continue;const r=spawnSync('bash',[s],{stdio:'inherit'});if(s.includes('register')&&r.status)process.exit(r.status??0);}process.exit(0)\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L2633

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L2633

2634 "prepublishOnly": "bash scripts/release/gate/prepublish-npm.sh",

2635 "vscode:prepublish": "bash scripts/release/prepublish.sh",

2636 "validate:settings": "if [ -f ../hurc-harness/tools/settings-docs/validate.mjs ]; then node ../hurc-harness/tools/settings-docs/validate.mjs --package package.json --min 40; else echo 'WARN: hurc-harness settings validator missing — skipping settings-docs gate'; fi",

2637 "docs:settings": "if [ -f ../hurc-harness/tools/settings-docs/generate.mjs ]; then node ../hurc-harness/tools/settings-docs/generate.mjs --package package.json --title \"Power Claude\" --out-md docs/settings/reference.md --out-json docs/settings/reference.json; else echo 'WARN: hurc-harness settings doc generator missing — skipping'; fi",

2638 "test:prepublish": "node scripts/release/run-vitest-prepublish.mjs",

2639 "test:prepublish:raw": "vitest run --reporter=basic --no-coverage --config=vitest.config.prepublish.ts",

2640 "test:replay": "bash test/replay/run-replay-suite.sh",

2641 "test:messaging": "bash test/messaging/roundtrip.sh",

2642 "compile": "tsc -p ./ --noEmit",

2643 "vscode:uninstall": "node ./out/uninstall-hook.js",

2644 "inject:version": "bash scripts/build/inject-version.sh",

2645 "vendor:sync": "bash scripts/vendor/sync-token-engines.sh && bash scripts/vendor/sync-jq.sh",

2646 "sync:media": "node scripts/build/sync-media.mjs --src node_modules/@cj-hurc/webview-ui/static --dest media --prefix pc",

2647 "sync:flow-explorer": "node scripts/build/sync-flow-explorer.mjs",

2648 "deps:refresh-internal": "node scripts/build/refresh-internal-deps.mjs",

2649 "gen:readme": "node scripts/build/install-channels.mjs --write",

2650 "gen:savings": "node scripts/build/savings-model.mjs --write",

2651 "check:savings": "node scripts/build/savings-model.mjs --check",

2652 "build": "npm run inject:version && npm run gen:readme && npm run gen:savings && npm run vendor:sync && npm run sync:media && npm run sync:flow-explorer && node esbuild.config.mjs && node scripts/build/emit-cli-manifest.mjs && node scripts/build/emit-system-index.mjs",

2653 "build:dev": "npm run deps:refresh-internal && npm run inject:version && npm run gen:readme && npm run gen:savings && npm run vendor:sync && npm run sync:media && npm run sync:flow-explorer && PC_DEV_BUILD=1 node esbuild.config.mjs && node scripts/build/emit-cli-manifest.mjs && node scripts/build/emit-system-index.mjs",

bin/power-claude-proxy.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = power-claude@3.0.88 matchedIdentity = npm:cG93ZXItY2xhdWRl:3.0.88 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/power-claude-proxy.jsView on unpkg

1#!/usr/bin/env node L2: 'use strict';const _0x23a8d6=_0x3e88;(function(_0xbb701f,_0x21fc97){const _0x3c0d53=_0x3e88,_0x3149c7=_0xbb701f();while(!![]){try{const _0x49587b=parseInt(_0x3c0d53(0x1ff5,'wkxN'))...

High

Child Process

Package source references child process execution.

bin/power-claude-proxy.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/power-claude-proxy.jsView on unpkg · L1

bin/power-claude-rotator.jsView file

Lines 1-2javascript

1#!/usr/bin/env node

2'use strict';const _0x469693=_0x2e04;function _0x4f3a(){const _0x18818a=['WOtdGItcLGu','srf8FCkbfa3dVNPDWQ3dP8oOW7m','W7K0WO1dgCoqzSoVz155CmkhW4rDtXuNvSokma','W7z/omorl1SaW48bW4KKpbRdSCodEaeBWOH3','W4tcK05oWQxcIa','WOiBv8kIWQ4','vmkcz0uCbCkWW6RdQmonFSkGnq5rW4a','dCkplGfY','CSkZnXZdMq','W7qzg8or'

data/vendor/jq/jq-darwin-amd64View file

•path = data/vendor/jq/jq-darwin-amd64 kind = native_binary sizeBytes = 851328 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

data/vendor/jq/jq-darwin-amd64View on unpkg

data/runtime/engine.encView file

•path = data/runtime/engine.enc kind = high_entropy_blob sizeBytes = 487624 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

data/runtime/engine.encView on unpkg

bin/power-claude-cli.jsView file

•path = bin/power-claude-cli.js kind = oversized_source_file sizeBytes = 3207200 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/power-claude-cli.jsView on unpkg

•path = bin/power-claude-cli.js kind = oversized_cli_entrypoint sizeBytes = 3207200 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/power-claude-cli.jsView on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const{existsSync}=require('fs');const{spawnSync}=require('child_process');const steps=['scripts/release/merge-drivers/register.sh','scripts/release/install-bypass-guard.sh...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/power-claude-proxy.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/power-claude-proxy.jsView on unpkg

High

Child Process

Package source references child process execution.

bin/power-claude-proxy.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/power-claude-proxy.jsView on unpkg · L1

bin/power-claude-rotator.jsView file

1#!/usr/bin/env node L2: 'use strict';const _0x469693=_0x2e04;function _0x4f3a(){const _0x18818a=['WOtdGItcLGu','srf8FCkbfa3dVNPDWQ3dP8oOW7m','[redacted]','W7z/omorl1SaW48bW4KKp...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

bin/power-claude-rotator.jsView on unpkg · L1

1#!/usr/bin/env node L2: 'use strict';const _0x469693=_0x2e04;function _0x4f3a(){const _0x18818a=['WOtdGItcLGu','srf8FCkbfa3dVNPDWQ3dP8oOW7m','[redacted]','W7z/omorl1SaW48bW4KKp...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/power-claude-rotator.jsView on unpkg · L1

data/vendor/jq/jq-darwin-amd64View file

•path = data/vendor/jq/jq-darwin-amd64 kind = native_binary sizeBytes = 851328 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

data/vendor/jq/jq-darwin-amd64View on unpkg

data/runtime/engine.encView file

•path = data/runtime/engine.enc kind = high_entropy_blob sizeBytes = 487624 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

data/runtime/engine.encView on unpkg

bin/power-claude-cli.jsView file

•path = bin/power-claude-cli.js kind = oversized_source_file sizeBytes = 3207200 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/power-claude-cli.jsView on unpkg

•path = bin/power-claude-cli.js kind = oversized_cli_entrypoint sizeBytes = 3207200 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/power-claude-cli.jsView on unpkg

Findings

2 Critical7 High5 Medium6 Low

CriticalRed Install Lifecycle Scriptpackage.json

CriticalPrevious Version Dangerous Deltabin/power-claude-proxy.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/power-claude-proxy.js

HighCommand Output Exfiltrationbin/power-claude-proxy.js

HighObfuscated Payload Loaderbin/power-claude-rotator.js

HighObfuscated

HighShips High Entropy Blobdata/runtime/engine.enc

HighOversized Source Filebin/power-claude-cli.js

MediumDynamic Requirebin/power-claude-rotator.js

MediumNetwork

MediumShips Native Binarydata/vendor/jq/jq-darwin-amd64

MediumOversized Cli Entrypointbin/power-claude-cli.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

84%Warn

Verdict confidence

IntentDangerous Capability

TypeAgent extension lifecycle risk

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

AuthorNeural-LLM

Maintainerscjhurc75

Version3.0.92

PublishedJul 16, 2026

LicenseSEE LICENSE IN LICENSE

Dependencies0

Integrityverified

Package size26.0 MB

Files55

Keywordsclaude-codeclaudeanthropicai-agentai-coding-agentcoding-agentai-coding-assistantai-coding

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./out/extension.jsbin → pc, power-claude

Runtimevscode ^1.80.0node >=20.0.0

Artifact35.9 MB · 55 files1 signature(s)

Install lifecyclepostinstallprepublishOnly

Behavioral surface

ChildProcessCryptoDynamicRequireFilesystemNetworkHighEntropyStringsMinifiedObfuscatedUrlStringsNoLicense