Loading npm security reports…

squeez@1.38.0: Malicious npm security report (Block) | LPM Firewall

registry / squeez / 1.38.0

squeez@1.38.0

Hook-based token compressor for Claude Code, Copilot CLI, and OpenCode. Compresses bash output up to 95%, collapses redundant calls, injects caveman persona.

OSV Malicious Advisory

scanned 9d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-13458 confirms this npm version as malicious. squeez@1.38.0 declares a postinstall hook ("postinstall": "node install.js") that runs automatically on npm install. install.js imports child_process, fs, https, and os; branches on process.platform; reads os.homedir(); performs fs.existsSync/readFileSync checks against paths under the user's home directory; and issues https.get requests to raw.githubusercontent.com URLs...

Advisory

MAL-2026-13458

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in squeez (npm)

Details

squeez@1.38.0 declares a postinstall hook ("postinstall": "node install.js") that runs automatically on npm install. install.js imports child_process, fs, https, and os; branches on process.platform; reads os.homedir(); performs fs.existsSync/readFileSync checks against paths under the user's home directory; and issues https.get requests to raw.githubusercontent.com URLs. The combination of an install-time lifecycle script, filesystem reads of home-directory paths, process spawning capability, and fetching content from a mutable third-party host at install time constitutes an install-time remote-content-fetch-and-execute pattern with home-directory reconnaissance. Fetching executable content from raw.githubusercontent.com at install time is a mutable, unpinned delivery channel: the current content of those URLs can change at any time without a package release, and the fetched bytes are handled inside a script that also has child_process available.

Decision reason

One or more suspicious static signals were detected.

References

OSV advisory PACKAGE PACKAGE

Source & flagged code

7 flagged

package.jsonView file

Lines 8-39json

8 "context-window",

9 "llm-tools",

10 "copilot-cli",

11 "compression"

12 ],

13 "homepage": "https://github.com/claudioemmanuel/squeez",

14 "bugs": {

15 "url": "https://github.com/claudioemmanuel/squeez/issues"

16 },

17 "repository": {

18 "type": "git",

19 "url": "https://github.com/claudioemmanuel/squeez.git"

20 },

21 "license": "Apache-2.0",

22 "readme": "README.md",

23 "author": "claudioemmanuel",

24 "bin": {

25 "squeez": "bin.js"

26 },

27 "scripts": {

28 "postinstall": "node install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 },

30 "engines": {

31 "node": ">=16"

32 },

33 "os": [

34 "darwin",

35 "linux",

36 "win32"

37 ]

38}

bin.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

3/**

4 * bin.js — CLI entry point for the squeez npm package.

5 * Delegates all arguments to the native binary at ~/.claude/squeez/bin/squeez.

6 * Auto-installs if the binary is missing (e.g. after `npx squeez`).

7 */

8const { execFileSync, execSync } = require

install.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

3/**

4 * postinstall — downloads the squeez binary and registers Claude Code hooks.

5 * Runs automatically on `npm install -g squeez` or `npx squeez`.

6 */

7const { execSync } = require('child_process');

8const

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin.jsView file

7*/ L8: const { execFileSync, execSync } = require('child_process'); L9: const fs = require('fs');

High

Child Process

Package source references child process execution.

bin.jsView on unpkg · L7

7*/ L8: const { execFileSync, execSync } = require('child_process'); L9: const fs = require('fs'); ... L13: const BINARY = path.join( L14: os.homedir(), '.claude', 'squeez', 'bin', L15: process.platform === 'win32' ? 'squeez.exe' : 'squeez' L16: ); ... L18: if (!fs.existsSync(BINARY)) { L19: process.stderr.write('squeez: binary not found — running installer...\n'); L20: if (process.platform === 'win32') { L21: process.stderr.write('squeez: on Windows, download from https://github.[redacted]\n'); L22: process.exit(1);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin.jsView on unpkg · L7

7*/ L8: const { execFileSync, execSync } = require('child_process'); L9: const fs = require('fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin.jsView on unpkg · L7

install.jsView file

165settings.statusLine = existingCmd L166: ? { type: 'command', command: `bash -c 'input=$(cat); echo "$input" | { ${existingCmd}; } 2>/dev/null; echo "$input" | ${squeezStatusCmd}'` } L167: : { type: 'command', command: squeezStatusCmd };

High

Shell

Package source references shell execution.

install.jsView on unpkg · L165

6*/ L7: const { execSync } = require('child_process'); L8: const https = require('https'); L9: const fs = require('fs'); ... L13: // Allow skipping (e.g. in CI that only needs the npm package metadata) L14: if (process.env.SQUEEZ_SKIP_INSTALL === '1') process.exit(0); L15:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

install.jsView on unpkg · L6

squeez@1.38.0

OSV Malicious Advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code