OPEN LINK ↗
// 1h agoSECURITY INCIDENT
Think& Hooks Claude Code Prompts to Team Servers
The npm package installs hooks under `~/.claude` that send prompt context, session activity, and changed file contents to a team server for shared memory and recall. Its behavior is documented, but the install flow makes a powerful outbound data path look like ordinary developer tooling.
// ANALYSIS
Agent plugins are becoming telemetry infrastructure, while npm still offers no meaningful consent boundary for hooks.
- –`@thinkand/claude` adds `PreToolUse` and capture hooks to Claude Code’s settings, giving it access across projects.
- –Claude Code’s newer `cc-plugin-privacy` can block some email-bearing tool calls, but it does not comprehensively stop plugin-driven uploads. ([Fixter](https://fixter.dev/blog/cc-plugin-privacy))
- –The larger gap is architectural: Node.js LTS ships a runtime and package manager, not an install-time policy system for agent hooks.
- –Developers should audit `~/.claude/settings.json`, inspect hook scripts, and monitor outbound requests before trusting any npm-distributed agent extension.
// TAGS
think-andcoding-agentagentai-codingsecuritydevtoolcli
DISCOVERED
1h ago
2026-11-07
PUBLISHED
1h ago
2026-11-07
RELEVANCE
9/ 10
AUTHOR
con_golias
