thalamus@1.5.62
⚠ Under reviewMobile and Web client for Claude Code
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe inspected lifecycle and agent-related excerpts do not establish malicious behavior. The required archive is non-UTF-8 and cannot support a clean citation, leaving its extracted contents unresolved.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Package installation triggers the postinstall script.
Impact
The archive’s behavior cannot be determined from the inspected text.
Mechanism
The script extracts a platform-specific compressed archive; the archive contents were not available for source-level review.
AI rationale
The inspected lifecycle and agent-related excerpts do not establish malicious behavior. The required archive is non-UTF-8 and cannot support a clean citation, leaving its extracted contents unresolved.
Evidence
package.jsonscripts/unpack-tools.cjstools/archives/difftastic-arm64-linux.tar.gz
Decision evidence
public snapshotAI called this Manual Review at 75.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The postinstall hook runs scripts/unpack-tools.cjs.
- The unpack script extracts a platform archive, whose contents could not be reviewed as UTF-8 source.
- The inspected Claude project paths are used for transcript access and scorecard metrics, with no agent configuration write shown in these excerpts.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
17 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/unpack-tools.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/thalamus-mcp.mjsView file
2L3: import { spawn } from 'child_process';
L4: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/thalamus-mcp.mjsView on unpkg · L2dist/index-D3S3vWVq.cjsView file
•context = ] ?? 0;\n if (va > vb) return 1;\n if (va < vb) return -1;\n }\n return 0;\n}\nfunction isCacheUsable(cached, currentVersion, now) {\n if (!cached) return false;\n if (now - cached.checkedAt >= CACHE_TTL_MS) return false;\n if (compareSemver(currentVersion, cached.latestVersion) > 0) return false;\n return true;\n}\nfunction readCache() {\n try {\n const raw = node_fs.readFileSync(CACHE_FILE, "utf-8");\n return JSON.parse(raw);\n } catch {\n return null;\n }\n}\nfunction writeCache(cache) {\n try {\n node_fs.writeFileSync(CACHE_FILE, JSON.stringify(cache), "utf-8");\n } catch {\n }\n}\nasync function fetchLatestVersion() {\n try {\n const response = await axios.get(\n `https://registry.npmjs.org/${NPM_PACKAGE_NAME}/latest`,\n { timeout:
Findings
3 Critical11 High6 Medium5 Low
CriticalEncrypted Payload Temp Executiondist/index-D3S3vWVq.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index-D3S3vWVq.cjs
CriticalPrevious Version Dangerous Deltadist/api-C5G9NAHj.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/thalamus-mcp.mjs
HighShelldist/index-D3S3vWVq.cjs
HighCredential Redirect Persistencedist/api-C5G9NAHj.cjs
HighCross File Remote Execution Contextdist/index-C1Cl3hbq.mjs
HighTrigger Reachable Persistencedist/index-D3S3vWVq.cjs
HighShips High Entropy Blobtools/archives/difftastic-arm64-linux.tar.gz
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to thalamus@1.5.62.
See all versions of thalamus for other recorded verdicts.
- Review the evidence and your use of thalamus@1.5.62 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.