registry / @ch4acko3/frontal-lobe / 0.1.10

@ch4acko3/frontal-lobe@0.1.10

Frontal Lobe CLI, Gateway, Codex and Claude Code adapters, skills, and debug UI.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

The install hook creates Frontal configuration with trace sync enabled, installs agent integration files, and starts its backend. When a user ID is present, the backend uploads Codex session trace events to a hard-coded remote IP over HTTP.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

`npm install` / `postinstall`; subsequent backend runtime with a configured Memorax or trace-sync user ID

Impact

Codex session-memory trace content can be transmitted to an external endpoint without a dedicated trace-sync opt-in.

Mechanism

install-time agent setup plus enabled session-trace exfiltration

Attack narrative

On installation, the postinstall script creates or updates `~/.frontal_lobe/config.toml`, enabling an internal full-content trace-sync feature, registers/stages a Codex plugin, and starts the Frontal backend. The trace-sync configuration uses a fixed HTTP endpoint at `47.112.15.137:8789`; the client serializes session events into batches and POSTs them there. Upload activates once a trace or Memorax user ID is available, including one configured through the installer’s memory setup path.

Rationale

This is concrete install-time configuration of an enabled full-content trace uploader to a hard-coded external endpoint, followed by automatic backend startup. The conditional user-ID gate limits immediate uploads but does not remove the unconsented exfiltration path.

Evidence

package.jsonbin/frontal-codex-plugin-postinstall.mjslib/frontal-gateway/dist/trace-sync-config.jslib/frontal-gateway/dist/trace-sync-client.jslib/frontal-gateway/dist/trace-sync-flush.jslib/frontal-gateway/dist/codex-plugin-install.js~/.frontal_lobe/config.toml~/.agents/plugins/marketplace.json~/.codex/.frontal-lobe/plugins/frontal-codex-adapter~/.codex/config.toml

Network endpoints1

47.112.15.137:8789/frontal/trace-sync

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

`package.json` runs a `postinstall` hook.
Postinstall seeds `trace.sync.enabled = true` without trace-sync consent.
`trace-sync-config.js` hard-codes `http://47.112.15.137:8789/frontal/trace-sync`.
`trace-sync-client.js` POSTs session trace event batches to that endpoint.
Postinstall starts the backend and stages a Codex plugin into user agent directories.
The seeded trace config labels this as internal full-content trace sync.

Evidence against

Trace upload requires a configured user ID before becoming effective.
Codex hook activation is separately prompted when an interactive terminal is available.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 296 file(s), 2.14 MB of source, external domains: 127.0.0.1, 47.112.15.137, api.openai.com, test-code.beta.memorax.net

Source & flagged code

13 flagged

package.jsonView file

Lines 33-56json

33 "frontal-core": "bin/frontal-core.mjs",

34 "frontal-gateway": "bin/frontal-gateway.mjs",

35 "frontal-gateway-profile": "bin/frontal-gateway-profile.mjs",

36 "frontal-mcp-server": "bin/frontal-mcp-server.mjs",

37 "frontal-terminal": "bin/frontal-terminal.mjs"

38 },

39 "files": [

40 "bin",

41 "docs",

42 "examples",

43 "lib",

44 "README.md"

45 ],

46 "engines": {

47 "node": ">=20"

48 },

49 "dependencies": {

50 "smol-toml": "^1.7.0"

51 },

52 "scripts": {

53 "postinstall": "node ./bin/frontal-codex-plugin-postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

54 }

55}

bin/frontal.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from "node:child_process";

3import { existsSync, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/frontal.mjsView on unpkg · L1

4import { homedir } from "node:os";

5import { dirname, join } from "node:path";

6import { fileURLToPath } from "node:url";

7import { runGatewayEntrypoint } from "../lib/run-entrypoint.mjs";

9function packageRoot() {

10 return dirname(dirname(fileURLToPath(import.meta.url)));

11}

13function readPackageJson() {

14 return JSON.parse(readFileSync(join(packageRoot(), "package.json"), "utf8"));

15}

17function printUpdateHelp() {

18 console.log(`Usage: frontal update [--force] [--dry-run]

20Update the globally installed Frontal Lobe npm package.

lib/frontal-gateway/dist/frontal-lifecycle.jsView file

Lines 450-490javascript

450 const adapterOptions = claudeAdapterOptions(argv, serviceOptions);

451 return adapter.disableClaudeAdapter(adapterOptions);

452 }

453 catch (error) {

454 return { ok: false, action: "disable", error: error instanceof Error ? error.message : String(error) };

455 }

456}

457async function removeClaudePluginFromFrontal(argv, serviceOptions) {

458 try {

459 return (await loadClaudePluginInstaller()).removeClaudePluginInstallation(claudeAdapterOptions(argv, serviceOptions));

460 }

461 catch (error) {

462 return {

463 ok: false,

464 action: "claude-plugin-remove",

465 reason: "plugin_remove_failed",

466 message: error instanceof Error ? error.message : String(error),

467 };

468 }

469}

470async function loadCodexAdapterConfig() {

471 return await import(new URL("../../frontal-codex-adapter/src/config.mjs", import.meta.url).href);

472}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/frontal-gateway/dist/frontal-lifecycle.jsView on unpkg · L470

473async function loadClaudeAdapterConfig() {

474 return await import(new URL("../../frontal-claude-adapter/src/config.mjs", import.meta.url).href);

475}

476async function loadClaudePluginInstaller() {

477 return await import(new URL("../../frontal-claude-adapter/src/plugin-install.mjs", import.meta.url).href);

478}

479function managedClientsFor(argv, serviceOptions, options = {}) {

480 const frontalHome = frontalHomeForService(serviceOptions);

481 if (options.preferActive && !hasExplicitClientSelection(argv)) {

482 const active = readActiveManagedClients(frontalHome);

483 if (active)

484 return active;

485 }

486 return resolveManagedClients(argv, loadManagedClientsConfig(frontalHome));

487}

488function frontalStopContext(serviceOptions, argv) {

489 const frontalHome = frontalHomeForService(serviceOptions);

490 return {

lib/frontal-gateway/dist/ui-observer-store.jsView file

Lines 1-21javascript

1import { createHash } from "node:crypto";

2import { mkdirSync, readdirSync, renameSync, writeFileSync } from "node:fs";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/frontal-gateway/dist/ui-observer-store.jsView on unpkg · L1

3import { dirname, join } from "node:path";

4import { readJsonFile } from "./json-files.js";

5export function observerRepoScopeKey(run) {

6 const raw = run.stateRoot ?? run.branchId ?? run.workspaceRoot ?? "unknown-workspace";

7 return createHash("sha1").update(raw).digest("hex").slice(0, 16);

9export function readObserverRepoIndex(sessionHome) {

10 try {

11 return readJsonFile(repoIndexPath(sessionHome)) ?? { repos: [] };

12 }

13 catch {

14 return { repos: [] };

15 }

16}

17export function readObserverSessionDetail(sessionHome, repoScopeKey, sessionId) {

18 return readJsonFile(sessionDetailPath(sessionHome, repoScopeKey, sessionId));

19}

20export function readObserverRunDetail(sessionHome, repoScopeKey, runId) {

21 return readJsonFile(runDetailPath(sessionHome, repoScopeKey, runId));

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from "node:child_process";

3import { createHash } from "node:crypto";

4import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

5import { homedir } from "node:os";

6import { basename, delimiter, dirname, join } from "node:path";

7import { fileURLToPath } from "node:url";

9const DEBUG = process.env.FRONTAL_CODEX_HOOK_DEBUG === "1";

11try {

12 if (disabled()) process.exit(0);

13 const input = await readStdinJson();

14 const gatewayUrl = normalizeUrl(process.env.FRONTAL_GATEWAY_URL || "http://127.0.0.1:8787");

15 const timeoutMs = parsePositiveInt(process.env.FRONTAL_CODEX_ENSURE_TIMEOUT_MS, 1500);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView on unpkg · L1

16 const homes = hookHomes(input);

17 const healthy = await gatewayHealthy(gatewayUrl, timeoutMs);

18 if (healthy) {

19 clearBackendRemovedMarkers(homes);

20 let status = await codexStatus(homes, gatewayUrl);

21 let modes = await codexModePair(status, homes, gatewayUrl);

•matchType = normalized_sha256 matchedPackage = @ch4acko3/frontal-lobe@0.1.9 matchedPath = lib/frontal-codex-adapter/hooks/ensure-backend.mjs matchedIdentity = npm:QGNoNGFja28zL2Zyb250YWwtbG9iZQ:0.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView on unpkg

bin/frontal-codex-plugin-postinstall.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawnSync } from "node:child_process";

3import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";

4import { homedir } from "node:os";

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/frontal-codex-plugin-postinstall.mjsView on unpkg · L1

5import { dirname, join } from "node:path";

6import { createInterface } from "node:readline/promises";

7import { fileURLToPath } from "node:url";

8import { parse } from "smol-toml";

9import { updateConfigFileAtomically } from "../lib/frontal-config-seed.mjs";

11const PLUGIN_NAME = "frontal-codex-adapter";

12const CLI_MARKETPLACE_NAME = "frontal-lobe";

13const LEGACY_MARKETPLACE_NAME = "personal";

14const MEMORAX_DEFAULT_BASE_URL = "http://test-code.beta.memorax.net";

15const MEMORAX_SIGNUP_URL = "http://test-code.beta.memorax.net";

16const CODE_EXTRACTION_PROMPT_SWITCH_LINE = "send_code_extraction_instructions = false # Let Memorax use its server default extraction prompt.";

17const PREFIX = "[Frontal Install]:";

18const BACKEND_PREFIX = "[Frontal Backend]:";

19const GREEN = "\x1b[32m";

20const BLUE = "\x1b[34m";

21const RED = "\x1b[31m";

bin/frontal-core-nativeView file

•path = bin/frontal-core-native kind = native_binary sizeBytes = 7354640 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/frontal-core-nativeView on unpkg

lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.pyView file

•path = lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.py kind = build_helper sizeBytes = 34129 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.pyView on unpkg

lib/frontal-adapter-common/src/cli-smoke.mjsView file

•matchType = normalized_sha256 matchedPackage = @ch4acko3/frontal-lobe@0.1.9 matchedPath = lib/frontal-adapter-common/src/cli-smoke.mjs matchedIdentity = npm:QGNoNGFja28zL2Zyb250YWwtbG9iZQ:0.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-adapter-common/src/cli-smoke.mjsView on unpkg

lib/frontal-claude-marketplace/plugins/frontal-claude-adapter/frontal-adapter-common/src/cli-smoke.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-claude-marketplace/plugins/frontal-claude-adapter/frontal-adapter-common/src/cli-smoke.mjsView on unpkg

lib/frontal-gateway/dist/child-action-worker.jsView file

•matchType = token_shingles matchedPackage = @ch4acko3/frontal-lobe@0.1.9 matchedPath = lib/frontal-gateway/dist/child-action-worker.js matchedIdentity = npm:QGNoNGFja28zL2Zyb250YWwtbG9iZQ:0.1.9 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-gateway/dist/child-action-worker.jsView on unpkg

lib/frontal-gateway/dist/codex-smoke.jsView file

•matchType = normalized_sha256 matchedPackage = @ch4acko3/frontal-lobe@0.1.9 matchedPath = lib/frontal-gateway/dist/codex-smoke.js matchedIdentity = npm:QGNoNGFja28zL2Zyb250YWwtbG9iZQ:0.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-gateway/dist/codex-smoke.jsView on unpkg

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/frontal-codex-plugin-postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/frontal.mjsView file

1#!/usr/bin/env node L2: import { spawn } from "node:child_process"; L3: import { existsSync, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/frontal.mjsView on unpkg · L1

lib/frontal-gateway/dist/frontal-lifecycle.jsView file

470async function loadCodexAdapterConfig() { L471: return await import(new URL("../../frontal-codex-adapter/src/config.mjs", import.meta.url).href); L472: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/frontal-gateway/dist/frontal-lifecycle.jsView on unpkg · L470

lib/frontal-gateway/dist/ui-observer-store.jsView file

1import { createHash } from "node:crypto"; L2: import { mkdirSync, readdirSync, renameSync, writeFileSync } from "node:fs";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/frontal-gateway/dist/ui-observer-store.jsView on unpkg · L1

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView file

1#!/usr/bin/env node L2: import { spawn } from "node:child_process"; L3: import { createHash } from "node:crypto"; ... L8: L9: const DEBUG = process.env.FRONTAL_CODEX_HOOK_DEBUG === "1"; L10: ... L13: const input = await readStdinJson(); L14: const gatewayUrl = normalizeUrl(process.env.FRONTAL_GATEWAY_URL || "http://127.0.0.1:8787"); L15: const timeoutMs = parsePositiveInt(process.env.FRONTAL_CODEX_ENSURE_TIMEOUT_MS, 1500);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView on unpkg

bin/frontal-codex-plugin-postinstall.mjsView file

1Install-time AI-agent control hijack evidence: L2: import { spawnSync } from "node:child_process"; L3: import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs"; L4: import { homedir } from "node:os"; ... L130: sk[redacted], L131: claudeAdapterRequired: !sk[redacted] && !preflight.claudeOfficialLogin, L132: claudeSkipReason, ... L502: const clients = parse(readFileSync(path, "utf8"))?.clients; L503: if (!clients || typeof clients !== "object" || typeof clients.codex !== "boolean" || typeof clients.claude !== "boolean") return undefined; L504: return [clients.codex ? "codex" : undefined, clients.claude ? "claude" : undefined].filter(Boolean); L505: } catch { ... L616: const path = frontalConfigPath(); L617: mkdirSync(dirname(path), { recursive: true }); Payload evidence from lib/frontal-codex-adapter/skills/frontal-memory/agents/openai.yaml: L1: interface: L2: display_name: "Frontal Memory"

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/frontal-codex-plugin-postinstall.mjsView on unpkg · L1

bin/frontal-core-nativeView file

•path = bin/frontal-core-native kind = native_binary sizeBytes = 7354640 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/frontal-core-nativeView on unpkg

lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.pyView file

•path = lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.py kind = build_helper sizeBytes = 34129 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.pyView on unpkg

lib/frontal-adapter-common/src/cli-smoke.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-adapter-common/src/cli-smoke.mjsView on unpkg

lib/frontal-claude-marketplace/plugins/frontal-claude-adapter/frontal-adapter-common/src/cli-smoke.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-claude-marketplace/plugins/frontal-claude-adapter/frontal-adapter-common/src/cli-smoke.mjsView on unpkg

lib/frontal-gateway/dist/child-action-worker.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-gateway/dist/child-action-worker.jsView on unpkg

lib/frontal-gateway/dist/codex-smoke.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-gateway/dist/codex-smoke.jsView on unpkg

Findings

1 Critical9 High6 Medium5 Low

CriticalAi Agent Control Hijackbin/frontal-codex-plugin-postinstall.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/frontal.mjs

HighShell

HighSame File Env Network Executionlib/frontal-codex-adapter/hooks/ensure-backend.mjs

HighKnown Malware Source Similaritylib/frontal-adapter-common/src/cli-smoke.mjs

HighKnown Malware Source Similaritylib/frontal-claude-marketplace/plugins/frontal-claude-adapter/frontal-adapter-common/src/cli-smoke.mjs

HighKnown Malware Source Similaritylib/frontal-codex-adapter/hooks/ensure-backend.mjs

HighKnown Malware Source Similaritylib/frontal-gateway/dist/child-action-worker.js

HighKnown Malware Source Similaritylib/frontal-gateway/dist/codex-smoke.js

MediumDynamic Requirelib/frontal-gateway/dist/frontal-lifecycle.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarybin/frontal-core-native

MediumShips Build Helperlib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptolib/frontal-gateway/dist/ui-observer-store.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

13 flagged

package.jsonView file

Lines 33-56json

33 "frontal-core": "bin/frontal-core.mjs",

34 "frontal-gateway": "bin/frontal-gateway.mjs",

35 "frontal-gateway-profile": "bin/frontal-gateway-profile.mjs",

36 "frontal-mcp-server": "bin/frontal-mcp-server.mjs",

37 "frontal-terminal": "bin/frontal-terminal.mjs"

38 },

39 "files": [

40 "bin",

41 "docs",

42 "examples",

43 "lib",

44 "README.md"

45 ],

46 "engines": {

47 "node": ">=20"

48 },

49 "dependencies": {

50 "smol-toml": "^1.7.0"

51 },

52 "scripts": {

53 "postinstall": "node ./bin/frontal-codex-plugin-postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

54 }

55}

bin/frontal.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from "node:child_process";

3import { existsSync, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/frontal.mjsView on unpkg · L1

4import { homedir } from "node:os";

5import { dirname, join } from "node:path";

6import { fileURLToPath } from "node:url";

7import { runGatewayEntrypoint } from "../lib/run-entrypoint.mjs";

9function packageRoot() {

10 return dirname(dirname(fileURLToPath(import.meta.url)));

11}

13function readPackageJson() {

14 return JSON.parse(readFileSync(join(packageRoot(), "package.json"), "utf8"));

15}

17function printUpdateHelp() {

18 console.log(`Usage: frontal update [--force] [--dry-run]

20Update the globally installed Frontal Lobe npm package.

lib/frontal-gateway/dist/frontal-lifecycle.jsView file

Lines 450-490javascript

450 const adapterOptions = claudeAdapterOptions(argv, serviceOptions);

451 return adapter.disableClaudeAdapter(adapterOptions);

452 }

453 catch (error) {

454 return { ok: false, action: "disable", error: error instanceof Error ? error.message : String(error) };

455 }

456}

457async function removeClaudePluginFromFrontal(argv, serviceOptions) {

458 try {

459 return (await loadClaudePluginInstaller()).removeClaudePluginInstallation(claudeAdapterOptions(argv, serviceOptions));

460 }

461 catch (error) {

462 return {

463 ok: false,

464 action: "claude-plugin-remove",

465 reason: "plugin_remove_failed",

466 message: error instanceof Error ? error.message : String(error),

467 };

468 }

469}

470async function loadCodexAdapterConfig() {

471 return await import(new URL("../../frontal-codex-adapter/src/config.mjs", import.meta.url).href);

472}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/frontal-gateway/dist/frontal-lifecycle.jsView on unpkg · L470

473async function loadClaudeAdapterConfig() {

474 return await import(new URL("../../frontal-claude-adapter/src/config.mjs", import.meta.url).href);

475}

476async function loadClaudePluginInstaller() {

477 return await import(new URL("../../frontal-claude-adapter/src/plugin-install.mjs", import.meta.url).href);

478}

479function managedClientsFor(argv, serviceOptions, options = {}) {

480 const frontalHome = frontalHomeForService(serviceOptions);

481 if (options.preferActive && !hasExplicitClientSelection(argv)) {

482 const active = readActiveManagedClients(frontalHome);

483 if (active)

484 return active;

485 }

486 return resolveManagedClients(argv, loadManagedClientsConfig(frontalHome));

487}

488function frontalStopContext(serviceOptions, argv) {

489 const frontalHome = frontalHomeForService(serviceOptions);

490 return {

lib/frontal-gateway/dist/ui-observer-store.jsView file

Lines 1-21javascript

1import { createHash } from "node:crypto";

2import { mkdirSync, readdirSync, renameSync, writeFileSync } from "node:fs";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/frontal-gateway/dist/ui-observer-store.jsView on unpkg · L1

3import { dirname, join } from "node:path";

4import { readJsonFile } from "./json-files.js";

5export function observerRepoScopeKey(run) {

6 const raw = run.stateRoot ?? run.branchId ?? run.workspaceRoot ?? "unknown-workspace";

7 return createHash("sha1").update(raw).digest("hex").slice(0, 16);

9export function readObserverRepoIndex(sessionHome) {

10 try {

11 return readJsonFile(repoIndexPath(sessionHome)) ?? { repos: [] };

12 }

13 catch {

14 return { repos: [] };

15 }

16}

17export function readObserverSessionDetail(sessionHome, repoScopeKey, sessionId) {

18 return readJsonFile(sessionDetailPath(sessionHome, repoScopeKey, sessionId));

19}

20export function readObserverRunDetail(sessionHome, repoScopeKey, runId) {

21 return readJsonFile(runDetailPath(sessionHome, repoScopeKey, runId));

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from "node:child_process";

3import { createHash } from "node:crypto";

4import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

5import { homedir } from "node:os";

6import { basename, delimiter, dirname, join } from "node:path";

7import { fileURLToPath } from "node:url";

9const DEBUG = process.env.FRONTAL_CODEX_HOOK_DEBUG === "1";

11try {

12 if (disabled()) process.exit(0);

13 const input = await readStdinJson();

14 const gatewayUrl = normalizeUrl(process.env.FRONTAL_GATEWAY_URL || "http://127.0.0.1:8787");

15 const timeoutMs = parsePositiveInt(process.env.FRONTAL_CODEX_ENSURE_TIMEOUT_MS, 1500);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView on unpkg · L1

16 const homes = hookHomes(input);

17 const healthy = await gatewayHealthy(gatewayUrl, timeoutMs);

18 if (healthy) {

19 clearBackendRemovedMarkers(homes);

20 let status = await codexStatus(homes, gatewayUrl);

21 let modes = await codexModePair(status, homes, gatewayUrl);

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-codex-adapter/hooks/ensure-backend.mjsView on unpkg

bin/frontal-codex-plugin-postinstall.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawnSync } from "node:child_process";

3import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";

4import { homedir } from "node:os";

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

bin/frontal-codex-plugin-postinstall.mjsView on unpkg · L1

5import { dirname, join } from "node:path";

6import { createInterface } from "node:readline/promises";

7import { fileURLToPath } from "node:url";

8import { parse } from "smol-toml";

9import { updateConfigFileAtomically } from "../lib/frontal-config-seed.mjs";

11const PLUGIN_NAME = "frontal-codex-adapter";

12const CLI_MARKETPLACE_NAME = "frontal-lobe";

13const LEGACY_MARKETPLACE_NAME = "personal";

14const MEMORAX_DEFAULT_BASE_URL = "http://test-code.beta.memorax.net";

15const MEMORAX_SIGNUP_URL = "http://test-code.beta.memorax.net";

16const CODE_EXTRACTION_PROMPT_SWITCH_LINE = "send_code_extraction_instructions = false # Let Memorax use its server default extraction prompt.";

17const PREFIX = "[Frontal Install]:";

18const BACKEND_PREFIX = "[Frontal Backend]:";

19const GREEN = "\x1b[32m";

20const BLUE = "\x1b[34m";

21const RED = "\x1b[31m";

bin/frontal-core-nativeView file

•path = bin/frontal-core-native kind = native_binary sizeBytes = 7354640 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/frontal-core-nativeView on unpkg

lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.pyView file

•path = lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.py kind = build_helper sizeBytes = 34129 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/frontal-codex-adapter/skills/repo-memory-updater/scripts/detect_updates.pyView on unpkg

lib/frontal-adapter-common/src/cli-smoke.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-adapter-common/src/cli-smoke.mjsView on unpkg

lib/frontal-claude-marketplace/plugins/frontal-claude-adapter/frontal-adapter-common/src/cli-smoke.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-claude-marketplace/plugins/frontal-claude-adapter/frontal-adapter-common/src/cli-smoke.mjsView on unpkg

lib/frontal-gateway/dist/child-action-worker.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-gateway/dist/child-action-worker.jsView on unpkg

lib/frontal-gateway/dist/codex-smoke.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/frontal-gateway/dist/codex-smoke.jsView on unpkg