Loading npm security reports…

@essentialai/cogent-bridge@3.23.0: AI-agent control-surface risk | LPM Firewall

registry / @essentialai/cogent-bridge / 3.23.0

@essentialai/cogent-bridge@3.23.0

Cogent Bridge — cross-agent comms for Claude Code, OpenAI Codex and Slack. Codex users: install with `curl -fsSL https://cogent.tools/install.sh | sh`, then start with `cogent-codex` for real-time peer wake.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. A global npm install automatically downloads and executes a remote shell installer, then adds a marketplace and plugin to Codex. These changes occur before the user invokes the package CLI.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm install -g @essentialai/cogent-bridge

Impact

Modifies the user's Codex installation and agent extension configuration without a separate confirmation.

Mechanism

postinstall remote shell execution and Codex plugin installation

Policy narrative

The package declares a postinstall hook. During a global npm installation, it invokes a curl-to-shell command to install a managed Codex build and then adds a GitHub marketplace and installs the cogent@cogent plugin through the Codex CLI. The hook suppresses installation failure by exiting zero. This is an unconsented lifecycle mutation of a broad AI-agent control surface.

Rationale

The automatic postinstall performs remote shell execution and changes Codex plugin configuration during installation. Its global-install guard limits exposure but does not establish consent for these agent-control changes.

Evidence

package.jsonscripts/postinstall-global.mjs~/.codex/packages/standaloneCodex plugin marketplace configuration

Network endpoints2

chatgpt.comgithub.com

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-global.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/bin/cogent-codex.jsView file

31*/ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { realpathSync } from "node:fs"; ... L40: function log(msg) { L41: process.stderr.write(`[cogent-codex] ${msg}\n`); L42: } ... L91: log("setting up real-time wake — installing codex's managed build (one-time)…"); L92: const res = spawnSync("sh", ["-c", "curl -fsSL https://chatgpt.com/codex/install.sh | sh"], { L93: stdio: "inherit", ... L202: async function main() { L203: loadConfig(process.env); L204: const codexBin = getConfig().COGENT_CODEX_PATH;

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/bin/cogent-codex.jsView on unpkg · L31

31Trigger-reachable chain: manifest.bin -> dist/bin/cogent-codex.js L31: */ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { realpathSync } from "node:fs"; ... L40: function log(msg) { L41: process.stderr.write(`[cogent-codex] ${msg}\n`); L42: } ... L91: log("setting up real-time wake — installing codex's managed build (one-time)…"); L92: const res = spawnSync("sh", ["-c", "curl -fsSL https://chatgpt.com/codex/install.sh | sh"], { L93: stdio: "inherit", ... L202: async function main() { L203: loadConfig(process.env); L204: const codexBin = getConfig().COGENT_CODEX_PATH;

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bin/cogent-codex.jsView on unpkg · L31

•matchType = previous_version_dangerous_delta matchedPackage = @essentialai/cogent-bridge@3.20.5 matchedIdentity = npm:[redacted]:3.20.5 similarity = 0.778 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/cogent-codex.jsView on unpkg

31*/ L32: import { spawn, spawnSync } from "node:child_process"; L33: import { realpathSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/bin/cogent-codex.jsView on unpkg · L31

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = dist/bin/cogent-codex.js matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/cogent-codex.jsView on unpkg

dist/constants.jsView file

8try { L9: const require = createRequire(import.meta.url); L10: return require("../package.json").version;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/constants.jsView on unpkg · L8

dist/backend/npm-update-check.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/backend/npm-update-check.js#virtual:normalized:round1View on unpkg

dist/services/codex-preflight.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = dist/services/codex-preflight.js matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-preflight.jsView on unpkg

scripts/postinstall-global.mjsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = scripts/postinstall-global.mjs matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall-global.mjsView on unpkg

dist/services/codex-cli.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = dist/services/codex-cli.js matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-cli.jsView on unpkg

Source & flagged code

11 flagged

package.jsonView file

Lines 19-59json

19 "cogent-codex": "dist/bin/cogent-codex.js"

20 },

21 "files": [

22 "dist",

23 "README.md",

24 "LICENSE",

25 "CHANGELOG.md",

26 "server.json",

27 "scripts/postinstall-global.mjs"

28 ],

29 "scripts": {

30 "start": "node dist/index.js",

31 "dev": "tsx watch src/index.ts",

32 "build": "node node_modules/typescript/bin/tsc && npm run build:bundle",

33 "build:bundle": "node scripts/build-bundle.mjs",

34 "clean": "rm -rf dist plugin/bridge",

35 "test": "node node_modules/vitest/vitest.mjs run",

36 "test:watch": "node node_modules/vitest/vitest.mjs",

37 "test:unit": "node node_modules/vitest/vitest.mjs run --exclude 'src/e2e/**'",

38 "test:coverage": "node node_modules/vitest/vitest.mjs run --coverage",

39 "postinstall": "node scripts/postinstall-global.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 "prepublishOnly": "npm run build && npm run typecheck && npm test",

41 "typecheck": "node node_modules/typescript/bin/tsc -p tsconfig.test.json --noEmit",

42 "test:all": "node scripts/test-all.mjs",

43 "secret-scan": "node scripts/secret-scan.mjs",

44 "verify": "npm run typecheck && npm run test:all && node scripts/artifact-staleness-test.mjs && node scripts/dist-blackbox-test.mjs"

45 },

46 "keywords": [

47 "mcp",

48 "model-context-protocol",

49 "claude",

50 "claude-code",

51 "bridge",

52 "inter-session",

53 "communication",

54 "ai",

55 "agent",

56 "cogent",

57 "cogent-bridge"

58 ],

59 "repository": {

dist/bin/cogent-codex.jsView file

Lines 11-51javascript

11 *

12 * The ONLY user step is running `cogent-codex` instead of `codex`. This wrapper

13 * self-bootstraps everything else, no exports / config /

dist/constants.jsView file

Lines 1-28javascript

1import { createRequire } from "node:module";

2function resolveVersion() {

3 // `typeof` on an undeclared identifier is safe (returns "undefined"); in the bundle

4 // esbuild replaces the identifier with a string literal so this branch wins.

5 if (typeof __COGENT_VERSION__ ===

dist/backend/npm-update-check.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/backend/npm-update-check.js#virtual:normalized:round1View on unpkg

dist/services/codex-preflight.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = dist/services/codex-preflight.js matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-preflight.jsView on unpkg

scripts/postinstall-global.mjsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = scripts/postinstall-global.mjs matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall-global.mjsView on unpkg

dist/services/codex-cli.jsView file

•matchType = normalized_sha256 matchedPackage = @essentialai/cogent-bridge@3.21.5 matchedPath = dist/services/codex-cli.js matchedIdentity = npm:[redacted]:3.21.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/codex-cli.jsView on unpkg