Loading npm security reports…

@essentialai/cogent-bridge@3.20.5: Suspicious npm security report | LPM Firewall

registry / @essentialai/cogent-bridge / 3.20.5

@essentialai/cogent-bridge@3.20.5

Cogent Bridge — cross-agent comms for Claude Code, OpenAI Codex and Slack. Codex users: install with `curl -fsSL https://cogent.tools/install.sh | sh`, then start with `cogent-codex` for real-time peer wake.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A global install can download and execute Codex's installer and register the vendor's Cogent plugin. During configured cloud use, incoming peer messages can be injected into a local Codex session; no separate theft or destructive payload was found.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm install -g activates the guarded postinstall; registered cloud peers activate runtime relay.

Impact

It expands the AI-agent control surface and can execute relay prompts with a fallback that removes Codex approval and sandbox controls.

Mechanism

Global Codex plugin provisioning and cloud-to-agent message relay.

AI rationale

This is a real first-party agent-extension lifecycle and remote-execution capability, so it warrants a warning. It does not meet the blocking policy because the mutation is limited to the vendor's Codex setup rather than a foreign or broad control surface.

Evidence

package.jsonscripts/postinstall-global.mjsdist/services/auto-relay.jsdist/services/codex-app-server.jsdist/services/codex-preflight.jsdist/config.js~/.codex/packages/standalone~/.codex/config.toml

Network endpoints4

chatgpt.com/codex/install.sh/eaisdevelopment/cogent.git

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-global.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/bin/cogent-codex.jsView file

31*/ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { readFile } from "node:fs/promises"; ... L39: function log(msg) { L40: process.stderr.write(`[cogent-codex] ${msg}\n`); L41: } ... L90: log("setting up real-time wake — installing codex's managed build (one-time)…"); L91: const res = spawnSync("sh", ["-c", "curl -fsSL https://chatgpt.com/codex/install.sh | sh"], { L92: stdio: "inherit", ... L201: async function main() { L202: loadConfig(process.env); L203: const codexBin = getConfig().COGENT_CODEX_PATH;

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/bin/cogent-codex.jsView on unpkg · L31

31Trigger-reachable chain: manifest.bin -> dist/bin/cogent-codex.js L31: */ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { readFile } from "node:fs/promises"; ... L39: function log(msg) { L40: process.stderr.write(`[cogent-codex] ${msg}\n`); L41: } ... L90: log("setting up real-time wake — installing codex's managed build (one-time)…"); L91: const res = spawnSync("sh", ["-c", "curl -fsSL https://chatgpt.com/codex/install.sh | sh"], { L92: stdio: "inherit", ... L201: async function main() { L202: loadConfig(process.env); L203: const codexBin = getConfig().COGENT_CODEX_PATH;

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bin/cogent-codex.jsView on unpkg · L31

31*/ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { readFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/bin/cogent-codex.jsView on unpkg · L31

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = dist/bin/cogent-codex.js matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/cogent-codex.jsView on unpkg

dist/constants.jsView file

8try { L9: const require = createRequire(import.meta.url); L10: return require("../package.json").version;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/constants.jsView on unpkg · L8

dist/services/codex-app-server.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = dist/services/codex-app-server.js matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-app-server.jsView on unpkg

dist/services/codex-preflight.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = dist/services/codex-preflight.js matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-preflight.jsView on unpkg

dist/startup.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = dist/startup.js matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/startup.jsView on unpkg

scripts/postinstall-global.mjsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = scripts/postinstall-global.mjs matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall-global.mjsView on unpkg

Source & flagged code

10 flagged

package.jsonView file

Lines 16-56json

16 "cogent-codex": "dist/bin/cogent-codex.js"

17 },

18 "files": [

19 "dist",

20 "README.md",

21 "LICENSE",

22 "CHANGELOG.md",

23 "server.json",

24 "scripts/postinstall-global.mjs"

25 ],

26 "scripts": {

27 "start": "node dist/index.js",

28 "dev": "tsx watch src/index.ts",

29 "build": "node node_modules/typescript/bin/tsc && npm run build:bundle",

30 "build:bundle": "node scripts/build-bundle.mjs",

31 "clean": "rm -rf dist plugin/bridge",

32 "test": "node node_modules/vitest/vitest.mjs run",

33 "test:watch": "node node_modules/vitest/vitest.mjs",

34 "test:unit": "node node_modules/vitest/vitest.mjs run --exclude 'src/e2e/**'",

35 "test:coverage": "node node_modules/vitest/vitest.mjs run --coverage",

36 "postinstall": "node scripts/postinstall-global.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

37 "prepublishOnly": "npm run build && npm run test:unit"

38 },

39 "keywords": [

40 "mcp",

41 "model-context-protocol",

42 "claude",

43 "claude-code",

44 "bridge",

45 "inter-session",

46 "communication",

47 "ai",

48 "agent",

49 "cogent",

50 "cogent-bridge"

51 ],

52 "repository": {

53 "type": "git",

54 "url": "https://github.com/eaisdevelopment/cogent.git"

55 },

56 "homepage": "https://github.com/eaisdevelopment/cogent#readme",

dist/bin/cogent-codex.jsView file

Lines 11-51javascript

11 *

12 * The ONLY user step is running `cogent-codex` instead of `codex`. This wrapper

13 * self-bootstraps everything else, no exports / config /

dist/constants.jsView file

Lines 1-28javascript

1import { createRequire } from "node:module";

2function resolveVersion() {

3 // `typeof` on an undeclared identifier is safe (returns "undefined"); in the bundle

4 // esbuild replaces the identifier with a string literal so this branch wins.

5 if (typeof __COGENT_VERSION__ ===

dist/services/codex-app-server.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = dist/services/codex-app-server.js matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-app-server.jsView on unpkg

dist/services/codex-preflight.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = dist/services/codex-preflight.js matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-preflight.jsView on unpkg

dist/startup.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = dist/startup.js matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/startup.jsView on unpkg

scripts/postinstall-global.mjsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = scripts/postinstall-global.mjs matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall-global.mjsView on unpkg