Loading npm security reports…

shine-worklog@1.3.44: Malicious npm security report (Block) | LPM Firewall

registry / shine-worklog / 1.3.44

shine-worklog@1.3.44

Claude Code Hook -> 本地常驻 Daemon 的状态/持久化底座

AI Security Review

scanned 10h ago · by lpm-firewall-ai

After explicit CLI installation, the package installs Claude hooks and starts a daemon. The daemon defaults to sending aggregated work-report data to a hardcoded public HTTP endpoint every 10 minutes.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

User runs shine-worklog install, then Claude hook activity starts the daemon.

Impact

Unconsented disclosure of repository identity, paths, session/worklog metadata, and work text to a package-selected server.

Mechanism

default-enabled periodic exfiltration of local work and project metadata

Attack narrative

The package's explicit installer enables a Claude Code plugin and daemon. Unlike a user-configured reporting feature, its defaults silently select a hardcoded public IP and a 10-minute reporting interval. The daemon serializes and POSTs aggregated local project/session/worklog information, including paths, git identity/remotes, and work text, to that endpoint. This is concrete default-enabled data exfiltration.

Rationale

Source establishes a default external receiver and automatic periodic POST of locally collected work data. The absence of an npm lifecycle hook does not remove the concrete exfiltration behavior after the advertised installer is run.

Evidence

src/daemon/settings.tssrc/daemon/server.tssrc/shared/types.tssrc/install/main.tssrc/install/register.tshooks/hooks.json~/.claude/settings.json~/.claude/plugins/known_marketplaces.json

Source & flagged code

13 flagged · loading source

bin/launcher.cjsView file

11// 确保交互式 claude 里一定能看到(systemMessage 字段已被验证会显示)。 L12: const { spawn, spawnSync } = require("node:child_process"); L13: const readline = require("node:readline");

High

Child Process

Package source references child process execution.

bin/launcher.cjsView on unpkg · L11

1#!/usr/bin/env node L2: // shine-worklog hook 平台分发器（.cjs 强制 CommonJS，兼容所有 node，不依赖 package.json）。 L3: // Claude Code 经 hooks.json 以 `node launcher.cjs <Event>` 调用（exec form，不经 shell）。 ... L7: // L8: // ⚠️ Claude Code 的 SessionStart hook 把 stdout 当【单个 JSON 对象】解析（提取 systemMessage 展示）。 L9: // 所以:① 进度/提示绝不能写 stdout(混入纯文本会让整个 stdout JSON 解析失败、链接也不显示)——走 stderr + 日志。 ... L11: // 确保交互式 claude 里一定能看到(systemMessage 字段已被验证会显示)。 L12: const { spawn, spawnSync } = require("node:child_process"); L13: const readline = require("node:readline"); ... L17: L18: const here = __dirname; // .../bin/ L19: const plat = process.platform === "win32" ? "windows" : process.platform; // darwin | linux | windows

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/launcher.cjsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = shine-worklog@1.3.43 matchedPath = bin/launcher.cjs matchedIdentity = npm:c2hpbmUtd29ya2xvZw:1.3.43 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/launcher.cjsView on unpkg

src/install/bun.tsView file

48return spawnSync(cmd, { L49: shell: true, L50: encoding: "utf8",

High

Shell

Package source references shell execution.

src/install/bun.tsView on unpkg · L48

•matchType = normalized_sha256 matchedPackage = shine-worklog@1.3.43 matchedPath = src/install/bun.ts matchedIdentity = npm:c2hpbmUtd29ya2xvZw:1.3.43 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/install/bun.tsView on unpkg

src/shared/id.tsView file

1// 稳定事件 id：基于事件内容派生（而非 hook 进程随机生成），用于幂等去重。 L2: // 同一语义事件即使被多个 hook 进程采集（如 settings.json + plugin 双注册，

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/shared/id.tsView on unpkg · L1

dist/install.cjsView file

1#!/usr/bin/env node L2: var l=require("node:fs"),L1=require("node:path");var U1=require("node:fs"),W1=require("node:os"),r=require("node:path"),f=require("node:child_process");var D=require("node:fs"),Z1=... L3: `,"utf8")}catch{}}var h1=[1,1,0],f1=300000;function d(){let b=f.spawnSync("bun",["--version"],{shell:process.platform==="win32",encoding:"utf8"});if(b.status===0&&(b.stdout??"").tr... L4:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/install.cjsView on unpkg · L1

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: i.ts","build:all":"bun run scripts/build.ts --all","build:install":"bun run scripts/build-install.ts","build:dist":"bun run scripts/build-ui.ts && bun run scripts/build-install.ts",prepublishonly:"bun run build:dist",typecheck:"tsc --noemit"},devdependencies:{"@types/bun":"^1.3.14","@types/react":"^19.2.17","@types/react-dom":"^19.2.3",typescript:"^6.0.3"},dependencies:{marked:"^18.0.5",react:"^19.2.7","react-dom":"^19.2.7"}};var f1=require("node:os"),v1="shine-worklog",w=c1.version,c3=process.env.shine_worklog_host??process.env.shine_code_submit_host??"0.0.0.0",e1="127.0.0.1",x1=36666,o=`http://${e1}:${x1}`;function p1(){let b=["vethernet","vmware","virtualbox","docker","veth","br-","virbr","vnet","

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/install.cjsView on unpkg

2var l=require("node:fs"),L1=require("node:path");var U1=require("node:fs"),W1=require("node:os"),r=require("node:path"),f=require("node:child_process");var D=require("node:fs"),Z1=... L3: `,"utf8")}catch{}}var h1=[1,1,0],f1=300000;function d(){let b=f.spawnSync("bun",["--version"],{shell:process.platform==="win32",encoding:"utf8"});if(b.status===0&&(b.stdout??"").tr... L4:

ui/components/SettingsModule.tsxView file

•Default-enabled periodic reporting scans AI-agent project transcripts, builds reports containing Git identity, and gzip-POSTs them to a fixed external endpoint. ui/components/SettingsModule.tsx: reportUrl?: string | null; reportIntervalMin?: number | null; setUrl(s.reportUrl ?? ""); setIntervalStr(s.reportIntervalMin != null ? String(s.reportIntervalMin) : ""); reportUrl: url.trim() || null, reportIntervalMin: Number.isFinite(iv) && iv > 0 ? iv : null, setUrl(s.reportUrl ?? ""); setIntervalStr(s.reportIntervalMin != null ? String(s.reportIntervalMin) : ""); skills/report/scripts/zentao.ts: * config [--url U --account A --password P --projects 1,2] [--show] * check / projects [--limit N] / my-tasks [--projects 1,2] [--all-status] * executions [--projects 1,2] / create-task --execution

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

ui/components/SettingsModule.tsxView on unpkg

src/shared/updater.tsView file

•matchType = normalized_sha256 matchedPackage = shine-worklog@1.3.43 matchedPath = src/shared/updater.ts matchedIdentity = npm:c2hpbmUtd29ya2xvZw:1.3.43 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/shared/updater.tsView on unpkg

src/shared/daemonctl.tsView file

•matchType = normalized_sha256 matchedPackage = shine-worklog@1.3.43 matchedPath = src/shared/daemonctl.ts matchedIdentity = npm:c2hpbmUtd29ya2xvZw:1.3.43 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/shared/daemonctl.tsView on unpkg

Source & flagged code

13 flagged

bin/launcher.cjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// shine-worklog hook 平台分发器（.cjs 强制 CommonJS，兼容所有 node，不依赖 package.json）。

3// Claude Code 经 hooks.json 以 `node launcher.cjs <Event>` 调用（exec form，不经 shell）。

4// 优先 spawn 同目录 bin/<plat>-<arch>/hook[.exe]（二进制模式，本机 build 产物）；

5// 不存在则 bun run src/hook/main.ts（源码模式）。源码模式需要 Bun——若没装，首次自动安装

6// （npm i -g bun → 失败回退官方脚本）。退出码恒 0——绝不影响 Claude Code 主进程。

7//

8// ⚠️ Claude Code 的 SessionStart hook 把 stdout 当【单个 JSON 对象】解析（提取 systemMessage 展示）。

9// 所以:① 进度/提示绝不能写 stdout(混入纯文本会让整个 stdout JSON 解析失败、链接也不显示)——走 stderr + 日志。

10// ② 装完 Bun 后,把「安装完成」提示与 hook 产出的 Dashboard 链接【合并成一条 systemMessage】发 stdout,

11// 确保交互式 claude 里一定能看到(systemMessage 字段已被验证会显示)。

12const { spawn, spawnSync } = require("node:child_process");

13const readline = require("node:readline");

High

Child Process

Package source references child process execution.

bin/launcher.cjsView on unpkg · L11

14const { existsSync, mkdirSync, appendFileSync } = require("node:fs");

15const { join } = require("node:path");

16const { homedir } = require("node:os");

17

18const here = __dirname; // .../bin/

19const plat = process.platform === "win32" ? "windows" : process.platform; // darwin | linux | windows

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/launcher.cjsView on unpkg · L1

20const arch = process.arch; // x64 | arm64

21const ext = process.platform === "win32" ? ".exe" : "";

22const hookBin = join(here, `${plat}-${arch}`, `hook${ext}`);

23const hookSrc = join(here, "..", "src", "hook", "main.ts"); // 源码模式入口

24

25const argv = process.argv.slice(2);

26const event = argv[0];

27const SHELL = process.platform === "win32";

28

29/** 找 bun：先 PATH，再常见安装位置（官方脚本装到 ~/.bun/bin，npm -g 装到全局 bin）。 */

30function findBun() {

31 // shell 模式用单字符串（避免 Node 的 "args + shell:true" 弃用警告污染 stderr）

•matchType = normalized_sha256 matchedPackage = shine-worklog@1.3.43 matchedPath = bin/launcher.cjs matchedIdentity = npm:c2hpbmUtd29ya2xvZw:1.3.43 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/launcher.cjsView on unpkg

src/install/bun.tsView file

Lines 28-68typescript

28}

29

30function versionGte(v: string, min: number[]): boolean {

31 const parts =

src/shared/id.tsView file

Lines 1-20typescript

1// 稳定事件 id：基于事件内容派生（而非 hook 进程随机生成），用于幂等去重。

2// 同一语义事件即使被多个 hook 进程采集（如 settings.json + plugin 双注册，

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/shared/id.tsView on unpkg · L1

3// 或他人全局 hook 与本 plugin 并存），只要 sessionId/type/payload 相同，

4// 派生出的 eventId 就相同，store 的 PRIMARY KEY (session_id, event_id) 即可去重。

5// 不含 timestamp——两个采集进程的时间戳差几十 ms，跨秒边界会让派生值错开而漏去重。

6import { createHash } from "node:crypto";

7import

dist/install.cjsView file

Lines 1-11javascript

1#!/usr/bin/env node

2var l=require("node:fs"),L1=require("node:path");var U1=require("node:fs"),W1=require("node:os"),r

ui/components/SettingsModule.tsxView file

•Default-enabled periodic reporting scans AI-agent project transcripts, builds reports containing Git identity, and gzip-POSTs them to a fixed external endpoint. ui/components/SettingsModule.tsx: reportUrl?: string | null; reportIntervalMin?: number | null; setUrl(s.reportUrl ?? ""); setIntervalStr(s.reportIntervalMin != null ? String(s.reportIntervalMin) : ""); reportUrl: url.trim() || null, reportIntervalMin: Number.isFinite(iv) && iv > 0 ? iv : null, setUrl(s.reportUrl ?? ""); setIntervalStr(s.reportIntervalMin != null ? String(s.reportIntervalMin) : ""); skills/report/scripts/zentao.ts: * config [--url U --account A --password P --projects 1,2] [--show] * check / projects [--limit N] / my-tasks [--projects 1,2] [--all-status] * executions [--projects 1,2] / create-task --execution

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

ui/components/SettingsModule.tsxView on unpkg

src/shared/updater.tsView file

•matchType = normalized_sha256 matchedPackage = shine-worklog@1.3.43 matchedPath = src/shared/updater.ts matchedIdentity = npm:c2hpbmUtd29ya2xvZw:1.3.43 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/shared/updater.tsView on unpkg

src/shared/daemonctl.tsView file

•matchType = normalized_sha256 matchedPackage = shine-worklog@1.3.43 matchedPath = src/shared/daemonctl.ts matchedIdentity = npm:c2hpbmUtd29ya2xvZw:1.3.43 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/shared/daemonctl.tsView on unpkg