thalamus@1.5.54
⚠ Under reviewMobile and Web client for Claude Code
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe inspected source presents the archive as a Difftastic tool, but the trusted artifact analysis could not inspect the executable. Because that executable is extracted at install time and later run, its behavior remains materially unresolved.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Package installation extracts the platform archive; a session Difftastic request invokes the extracted binary.
Impact
The executable's behavior remains unknown, so its security impact cannot be determined from the available inspection.
Mechanism
The install script unpacks the archive, and the runtime resolves and spawns the resulting executable.
AI rationale
The inspected source presents the archive as a Difftastic tool, but the trusted artifact analysis could not inspect the executable. Because that executable is extracted at install time and later run, its behavior remains materially unresolved.
Evidence
.lpm-inspection-JFR0bZ/0-eb2deb082b1c.txttools/archives/difftastic-arm64-linux.tar.gzscripts/unpack-tools.cjsdist/api-kvrv_MYv.cjspackage.json
Decision evidence
public snapshotAI called this Manual Review at 88.0% confidence as Unknown with high false-positive risk.
AI review observations
- The package postinstall hook runs a script that unpacks bundled tools.
- The script extracts a platform-specific Difftastic archive; the runtime source locates and runs the extracted binary for a Difftastic request.
- The trusted artifact analysis identifies the archive but reports that inspection failed because of a buffer size limit.
- The indicated Claude-related locations are configuration and project-path helpers; session startup checks memory-directory overrides before configuring org-memory behavior.
Evidence against
- The source associates the archive with a Difftastic request and confines its working paths to the session scope, but the executable itself remains uninspected.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
16 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/unpack-tools.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/thalamus-mcp.mjsView file
2L3: import { spawn } from 'child_process';
L4: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/thalamus-mcp.mjsView on unpkg · L2dist/api-Dboaf-v5.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = thalamus@1.5.74
matchedIdentity = npm:dGhhbGFtdXM:1.5.74
similarity = 0.517
summary = stored previous version shares package body but lacks this dangerous source file
Findings
3 Critical10 High6 Medium5 Low
CriticalEncrypted Payload Temp Executiondist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
CriticalPrevious Version Dangerous Deltadist/api-Dboaf-v5.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/thalamus-mcp.mjs
HighShelldist/api-Dboaf-v5.mjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/api-Dboaf-v5.mjs
HighCross File Remote Execution Contextdist/index.cjs
HighTrigger Reachable Persistencedist/index.cjs
HighShips High Entropy Blobtools/archives/difftastic-arm64-linux.tar.gz
Affected versions and remediation
This report applies to thalamus@1.5.54.
See all versions of thalamus for other recorded verdicts.
- Review the evidence and your use of thalamus@1.5.54 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.