Loading npm security reports…
codex-ultra workbench launcher: server compiled locally with Bun + web UI (cxu starts it all).
LPM treats this as warn-only first-party agent extension lifecycle risk. The install hook copies a package-owned Pi provider extension into the package’s versioned server cache. This is automatic agent extension setup, but the inspected code does not establish a foreign configuration change or a confirmed attack.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references child process execution.
dist/postinstall.jsView on unpkg · L1Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/postinstall.jsView on unpkg · L1Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
dist/index.jsView on unpkg · L1Package ships native binary artifacts.
server-bundle/node-pty/prebuilds/win32-x64/pty.nodeView on unpkgPackage contains source files above the normal full-analysis size ceiling.
web-dist/assets/main-jbmvpmq3.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
server-bundle/node-pty/lib/unixTerminal.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
server-bundle/node-pty/lib/windowsPtyAgent.jsView on unpkgThis report applies to @codex-ultra/cxu@0.2.120.
See version security history for other recorded verdicts.
Evidence last updated: .
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L34Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgSource combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L34Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/index.jsView on unpkg · L496A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.jsView on unpkg · L34A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkgPackage source references dynamic require/import behavior.
dist/index.jsView on unpkg · L1Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L41Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L41Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
dist/index.jsView on unpkg · L1Package ships native binary artifacts.
server-bundle/node-pty/prebuilds/win32-x64/pty.nodeView on unpkgPackage contains source files above the normal full-analysis size ceiling.
web-dist/assets/main-jbmvpmq3.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
server-bundle/node-pty/lib/unixTerminal.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
server-bundle/node-pty/lib/windowsPtyAgent.jsView on unpkgPackage source references child process execution.
dist/postinstall.jsView on unpkg · L1Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/postinstall.jsView on unpkg · L1A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L34Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgSource combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L34Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/index.jsView on unpkg · L496A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.jsView on unpkg · L34A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkgPackage source references dynamic require/import behavior.
dist/index.jsView on unpkg · L1