@jacksondr5/j5code@0.0.41
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe inspected CLI source map shows default-on runtime telemetry sent to PostHog and a stable identifier derived from hashed Codex or Claude account IDs. The package provides an opt-out, but no user-facing disclosure was found in the inspected package contents, so this warrants a warning rather than a malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
When the CLI's analytics service starts, it queues events and flushes them periodically and at shutdown.
Impact
This permits usage tracking linked by a stable pseudonymous identifier without a user opt-in; no credential values or prompts were found in the inspected event fields.
Mechanism
The service hashes a Codex account ID or Claude user ID for its telemetry identifier, then posts event batches to the configured PostHog host; the default is us.i.posthog.com.
AI rationale
The inspected CLI source map shows default-on runtime telemetry sent to PostHog and a stable identifier derived from hashed Codex or Claude account IDs. The package provides an opt-out, but no user-facing disclosure was found in the inspected package contents, so this warrants a warning rather than a malicious verdict.
Evidence
dist/bin.mjs.map~/.codex/auth.json~/.claude.json~/.j5code/userdata/anonymous-id
Network endpoints2
us.i.posthog.comT3CODE_POSTHOG_HOST (configurable)
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes `dist/bin.mjs` as the `j5` command.
- The CLI telemetry code defaults telemetry to enabled and posts batches to `https://us.i.posthog.com/batch/`.
- Telemetry identity code reads Codex and Claude account IDs and hashes them before use as an identifier.
- A provider-turn event records model, provider, token-usage and duration metadata.
Evidence against
- Telemetry can be disabled with `T3CODE_TELEMETRY_ENABLED`.
- The inspected telemetry code hashes account IDs and sends usage metadata rather than credential values or prompts.
- The manifest declares no install lifecycle scripts.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
10 flaggeddist/NodeServices-D2A6tYeN.mjsView file
6import { a as Size, c as BadArgument, d as systemError, i as FileTypeId, n as TypeId$5, o as WatchBackend, r as FileSystem, s as make$12, t as Path$1, u as badArgument } from "./Pa...
L7: import * as NodeChildProcess from "node:child_process";
L8: import { PassThrough } from "node:stream";
High
Child Process
Package source references child process execution.
dist/NodeServices-D2A6tYeN.mjsView on unpkg · L66Cross-file remote execution chain: dist/NodeServices-D2A6tYeN.mjs spawns dist/Schema-jqAifT37.mjs; helper contains network access plus dynamic code execution.
L6: import { a as Size, c as BadArgument, d as systemError, i as FileTypeId, n as TypeId$5, o as WatchBackend, r as FileSystem, s as make$12, t as Path$1, u as badArgument } from "./Pa...
L7: import * as NodeChildProcess from "node:child_process";
L8: import { PassThrough } from "node:stream";
...
L226: * operating-system processes. A spawner turns a command description into a
L227: * handle that can write to stdin, read stdout and stderr, wait for exit, kill
L228: * the process, and manage whether the process keeps its parent alive. Platform
...
L581: return callback(function loop(resume) {
L582: for (; i < chunk.length;) if (!optio
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/NodeServices-D2A6tYeN.mjsView on unpkg · L6Findings
1 Critical5 High7 Medium5 Low
CriticalTrojan Source Unicodedist/client/assets/ComposerPromptEditor-Cbs5lBJd.js
HighChild Processdist/NodeServices-D2A6tYeN.mjs
HighShell
HighCross File Remote Execution Contextdist/NodeServices-D2A6tYeN.mjs
HighKnown Malware Source Similaritydist/NodePtyAdapter-DgsthENb.mjs
HighKnown Malware Source Similaritydist/BunPtyAdapter-BRG4gp4_.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/resource-monitor/darwin-x64/t3-resource-monitor
MediumShips Wasm Moduledist/client/assets/ghostty-vt-DdA0Zryv.wasm
MediumOversized Source Filedist/bin.mjs
MediumOversized Cli Entrypoint
Affected versions and remediation
This report applies to @jacksondr5/j5code@0.0.41.
See all versions of @jacksondr5/j5code for other recorded verdicts.
- Review the evidence and your use of @jacksondr5/j5code@0.0.41 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.