registry / @apexfnd/apex / 1.0.2

@apexfnd/apex@1.0.2

Coding agent CLI with read, bash, edit, write tools and session management

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Installation fetches and executes an unverified remote native executable. On macOS it also launches a downloaded authentication helper that requests password confirmation.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall (unless CI or SKIP_APEX_INSTALL is set)

Impact

Remote release content can execute with the installing user's privileges and solicit credentials.

Mechanism

remote binary download and automatic execution

Attack narrative

During postinstall, install.cjs downloads a platform executable and writes it to bin. On macOS it separately downloads apex-auth-darwin to ~/.apex/apex-auth, makes it executable, and automatically spawns it while telling the user to confirm password dialogs. Neither download has an integrity or signature check, making remote release contents an install-time code-execution and credential-prompt surface.

Rationale

The concrete postinstall download-and-execute chain, including an automatic password-dialog helper, exceeds a benign installer pattern. Fixed URLs do not mitigate the lack of integrity verification or automatic execution.

Evidence

package.jsoninstall.cjsapex.cjsbin/apex~/.apex/apex-auth~/.apex/natives/16.3.6/pi_natives.win32-x64-baseline.node

Network endpoints1

github.com/Apex-Foundation/copilot/releases/download/v1.0.0/

@apexfnd/apex@1.0.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code