@codexed/codex@0.156.0-codexed.1
<p align="center"><strong>Codex CLI</strong> is a coding agent from OpenAI that runs locally on your computer. <p align="center"> <img src="https://github.com/openai/codex/blob/main/.github/codex-cli-splash.png" alt="Codex CLI splash" width="80%" /> </p
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection shows a global-install-only launcher setup and a CLI entrypoint that runs the platform binary. Although the POSIX hook recursively removes the existing launcher path, this is scoped to the package’s global `codex` launcher and does not establish malicious behavior.
Decision evidence
public snapshot- The manifest runs the postinstall script and lists platform-specific optional dependencies.
- The postinstall script exits unless npm reports a global install, then installs a launcher under the resolved prefix.
- On POSIX, launcher setup removes the existing `codex` path recursively before replacing it.
- The CLI launches the selected platform binary with caller arguments and inherited standard streams.
- No inspected source shows credential collection, network communication, or remote code fetching.
- The install-time file changes are limited to the Codex launcher paths and gated to global installs.
Source & flagged code
8 flagged · loading sourceTarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgFindings
Affected versions and remediation
This report applies to @codexed/codex@0.156.0-codexed.1.
See all versions of @codexed/codex for other recorded verdicts.
- Review the evidence and your use of @codexed/codex@0.156.0-codexed.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.