remote-claude-daemon@0.7.5: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

remote-claude-daemon@0.7.5: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

process-command-runner.jsView file

1// cross-spawn instead of node:child_process: on Windows npm CLIs are .cmd L2: // shims, which plain spawn refuses to run (EINVAL, CVE-2024-27980);

High

Child Process

Package source references child process execution.

process-command-runner.jsView on unpkg · L1

remote-claude-daemon.jsView file

11// capture backend: native SCStream on macOS, ffmpeg (gdigrab/x11grab) elsewhere L12: const screenCapturer = process.platform === "darwin" L13: ? await import("./macos-screen-stream-capturer.js") ... L33: // answer that does not require reading the filesystem by hand. L34: const DAEMON_VERSION = await readFile(new URL("./package.json", import.meta.url), "utf8") L35: .then(raw => JSON.parse(raw).version) L36: .catch(() => "unknown") ... L40: if (!process.versions.bun && nodeMajor < 22) { L41: console.error(`Нужен Node.js 22+ (у тебя ${process.version}). Обнови: https://nodejs.org`) L42: process.exit(1) L43: } L44: if (process.platform === "linux" && !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY) {

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

remote-claude-daemon.jsView on unpkg · L11

•Trigger-reachable chain: scripts.start -> remote-claude-daemon.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

remote-claude-daemon.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = remote-claude-daemon@0.5.5 matchedIdentity = npm:cmVtb3RlLWNsYXVkZS1kYWVtb24:0.5.5 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

remote-claude-daemon.jsView on unpkg

11// capture backend: native SCStream on macOS, ffmpeg (gdigrab/x11grab) elsewhere L12: const screenCapturer = process.platform === "darwin" L13: ? await import("./macos-screen-stream-capturer.js") ... L33: // answer that does not require reading the filesystem by hand. L34: const DAEMON_VERSION = await readFile(new URL("./package.json", import.meta.url), "utf8") L35: .then(raw => JSON.parse(raw).version) L36: .catch(() => "unknown") ... L40: if (!process.versions.bun && nodeMajor < 22) { L41: console.error(`Нужен Node.js 22+ (у тебя ${process.version}). Обнови: https://nodejs.org`) L42: process.exit(1) L43: } L44: if (process.platform === "linux" && !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

remote-claude-daemon.jsView on unpkg · L11

macos-universal-audio-captureView file

•path = macos-universal-audio-capture kind = native_binary sizeBytes = 237024 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

macos-universal-audio-captureView on unpkg