Loading npm security reports…

@essentialai/cogent-bridge@3.20.6: Suspicious npm security report | LPM Firewall

registry / @essentialai/cogent-bridge / 3.20.6

@essentialai/cogent-bridge@3.20.6

Cogent Bridge — cross-agent comms for Claude Code, OpenAI Codex and Slack. Codex users: install with `curl -fsSL https://cogent.tools/install.sh | sh`, then start with `cogent-codex` for real-time peer wake.

AI Security Review

scanned 22d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A global npm install of this package can run a postinstall that installs OpenAI's managed Codex build via a remote script and then registers this vendor's cogent plugin inside Codex. Dependency and npx installs are skipped. That is first-party agent-extension setup with a real install-time control-surface write, not a hidden second-stage implant.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm install -g @essentialai/cogent-bridge when npm_config_global is true and COGENT_SKIP_SETUP is not set.

Impact

Can change ~/.codex and Codex plugin state without a second prompt, and later user-run wake paths can skip Claude permissions or bypass a broken Codex sandbox.

Mechanism

guarded postinstall Codex plugin and managed-build setup

AI rationale

The install hook is first-party Codex plugin setup plus OpenAI's official installer, gated to global installs, which is guarded agent-extension lifecycle risk rather than an unconsented foreign hijack. Source shows no secret theft, obfuscation, or self-dependency lifecycle chain; scanner malware-similarity labels the same product files.

Evidence

package.jsonscripts/postinstall-global.mjs~/.codex/packages/standalone/current/codex

Network endpoints2

chatgpt.com/codex/install.shgithub.com/eaisdevelopment/cogent.git

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-global.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/bin/cogent-codex.jsView file

31*/ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { readFile } from "node:fs/promises"; ... L39: function log(msg) { L40: process.stderr.write(`[cogent-codex] ${msg}\n`); L41: } ... L90: log("setting up real-time wake — installing codex's managed build (one-time)…"); L91: const res = spawnSync("sh", ["-c", "curl -fsSL https://chatgpt.com/codex/install.sh | sh"], { L92: stdio: "inherit", ... L201: async function main() { L202: loadConfig(process.env); L203: const codexBin = getConfig().COGENT_CODEX_PATH;

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/bin/cogent-codex.jsView on unpkg · L31

31Trigger-reachable chain: manifest.bin -> dist/bin/cogent-codex.js L31: */ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { readFile } from "node:fs/promises"; ... L39: function log(msg) { L40: process.stderr.write(`[cogent-codex] ${msg}\n`); L41: } ... L90: log("setting up real-time wake — installing codex's managed build (one-time)…"); L91: const res = spawnSync("sh", ["-c", "curl -fsSL https://chatgpt.com/codex/install.sh | sh"], { L92: stdio: "inherit", ... L201: async function main() { L202: loadConfig(process.env); L203: const codexBin = getConfig().COGENT_CODEX_PATH;

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bin/cogent-codex.jsView on unpkg · L31

•matchType = previous_version_dangerous_delta matchedPackage = @essentialai/cogent-bridge@3.24.0 matchedIdentity = npm:[redacted]:3.24.0 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/cogent-codex.jsView on unpkg

31*/ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { readFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/bin/cogent-codex.jsView on unpkg · L31

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.4 matchedPath = dist/bin/cogent-codex.js matchedIdentity = npm:[redacted]:3.20.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/cogent-codex.jsView on unpkg

dist/constants.jsView file

8try { L9: const require = createRequire(import.meta.url); L10: return require("../package.json").version;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/constants.jsView on unpkg · L8

dist/backend/npm-update-check.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/backend/npm-update-check.js#virtual:normalized:round1View on unpkg

dist/services/codex-app-server.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = dist/services/codex-app-server.js matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-app-server.jsView on unpkg

dist/services/codex-preflight.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.23.3 matchedPath = dist/services/codex-preflight.js matchedIdentity = npm:[redacted]:3.23.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-preflight.jsView on unpkg

dist/startup.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.0 matchedPath = dist/startup.js matchedIdentity = npm:[redacted]:3.21.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/startup.jsView on unpkg

scripts/postinstall-global.mjsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.23.3 matchedPath = scripts/postinstall-global.mjs matchedIdentity = npm:[redacted]:3.23.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall-global.mjsView on unpkg

dist/services/cc-cli.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.7 matchedPath = dist/services/cc-cli.js matchedIdentity = npm:[redacted]:3.20.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/cc-cli.jsView on unpkg

dist/services/codex-cli.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.20.7 matchedPath = dist/services/codex-cli.js matchedIdentity = npm:[redacted]:3.20.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-cli.jsView on unpkg

dist/backend/npm-update-check.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = dist/backend/npm[redacted] matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/backend/npm-update-check.jsView on unpkg