thalamus@1.5.102
⚠ Under reviewMobile and Web client for Claude Code
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe postinstall hook extracts a bundled executable archive, but offline analysis could not inspect its expanded contents. Static source inspection did not establish malicious behavior, so manual review is appropriate.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Package installation runs the postinstall hook.
Impact
The archive’s executable behavior remains unresolved.
Mechanism
The hook decompresses and extracts the platform-specific difftastic archive.
AI rationale
The postinstall hook extracts a bundled executable archive, but offline analysis could not inspect its expanded contents. Static source inspection did not establish malicious behavior, so manual review is appropriate.
Evidence
.lpm-inspection-hcsEci/0-eb2deb082b1c.txtpackage.jsonscripts/unpack-tools.cjstools/archives/difftastic-arm64-linux.tar.gz
Decision evidence
public snapshotAI called this Manual Review at 82.0% confidence as Unknown with high false-positive risk.
AI review observations
- The postinstall hook runs a local tool unpacker.
- The unpacker extracts the included difftastic archive during installation.
- Offline analysis could not inspect the archive’s expanded contents, so its executable behavior remains unresolved.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
21 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/unpack-tools.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/thalamus-mcp.mjsView file
2L3: import { spawn } from 'child_process';
L4: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/thalamus-mcp.mjsView on unpkg · L2dist/api-CGGPkUoF.cjsView file
•context = return { rollup: UsageRollup.fromState(JSON.parse(node_fs.readFileSync(path, "utf8"))), existed: true };\n } catch (error) {\n logger.logger.warn(`[usage] unreadable rollup state ${path}, starting fresh:`, error);\n return { rollup: new UsageRollup(), existed: false };\n }\n}\nfunction saveRollup(name, rollup, dir = usageStateDir()) {\n const path = usageStatePath(name, dir);\n if (!path) return;\n const tmp = `${path}.${process.pid}.tmp`;\n try {\n node_fs.mkdirSync(dir, { recursive: true });\n node_fs.writeFileSync(tmp, JSON.stringify(rollup.toState(Date.now())));\n node_fs.renameSync(tmp, path);\n } catch (error) {\n logger.logger.warn(`[usage] could not persist rollup ${path}:`, error);\n try {\n node_fs.unlinkSync(tmp);\n } catch {\n }\
Findings
4 Critical13 High6 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index-C0Z95IJ-.cjs
CriticalEncrypted Payload Temp Executiondist/api-CGGPkUoF.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/api-CGGPkUoF.cjs
CriticalPrevious Version Dangerous Deltadist/index-C0Z95IJ-.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/thalamus-mcp.mjs
HighShelldist/api-CGGPkUoF.cjs
HighSame File Env Network Executiondist/api-CGGPkUoF.cjs
HighCredential Redirect Persistencedist/api-CGGPkUoF.cjs
HighCommand Output Exfiltrationdist/api-CGGPkUoF.cjs
HighSandbox Evasion Gated Capabilitydist/api-CGGPkUoF.cjs
Affected versions and remediation
This report applies to thalamus@1.5.102.
See all versions of thalamus for other recorded verdicts.
- Review the evidence and your use of thalamus@1.5.102 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.