@pmcai/codex-chat-widget@0.2.0: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@pmcai/codex-chat-widget@0.2.0: Suspicious npm security report | LPM Firewall

Source & flagged code

5 flagged · loading source

server/index.jsView file

5Manifest entrypoint (manifest.exports) carries capability families absent from dist/build output: environment+network, execution+network L5: // Serves the same API the browser widget expects, plus a built-in login page, so one L6: // command gives you a working Codex chat on http://127.0.0.1:4231. L7: import { createServer } from 'node:http' ... L30: if (!chunks.length) return {} L31: return JSON.parse(Buffer.concat(chunks).toString('utf8')) L32: } ... L36: res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'content-length': Buffer.byteLength(payload), ...extraHeaders }) L37: res.end(payload) L38: } ... L62: export async function createHarnessServer(options = {}) { L63: const pmaiHome = options.pmaiHome || process.env.PMAI_HOME || join(process.env.HOME || '.', '.pma

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

server/index.jsView on unpkg · L5

server/lib/gemini-models.jsView file

6} L7: const baseUrl = (process.env.GOOGLE_AI_BASE_URL || 'https://generativelanguage.googleapis.com/v1beta').replace(/\/$/, '') L8: const upstream = await fetch(`${baseUrl}/models?key=${encodeURIComponent(apiKey)}`, { cache: 'no-store' }) L9: const body = await upstream.json().catch(() => ({})) L10: if (!upstream.ok) {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

server/lib/gemini-models.jsView on unpkg · L6

6Trigger-reachable chain: manifest.exports -> server/index.js -> server/lib/gemini-models.js L6: } L7: const baseUrl = (process.env.GOOGLE_AI_BASE_URL || 'https://generativelanguage.googleapis.com/v1beta').replace(/\/$/, '') L8: const upstream = await fetch(`${baseUrl}/models?key=${encodeURIComponent(apiKey)}`, { cache: 'no-store' }) L9: const body = await upstream.json().catch(() => ({})) L10: if (!upstream.ok) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

server/lib/gemini-models.jsView on unpkg · L6

dist/styles.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/styles.cssView on unpkg

server/lib/runner.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @pmcai/codex-chat-widget@0.1.0 matchedIdentity = npm:[redacted]:0.1.0 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

server/lib/runner.jsView on unpkg

Source & flagged code

5 flagged

server/index.jsView file

Lines 1-25javascript

1// Standalone Codex harness server — zero runtime dependencies (node:http + node:sqlite).

2//

3// npx @pmcai/codex-chat-widget

4//

5// Serves the same API the browser widget expects, plus a built-in login page, so one

6// command gives you a working Codex chat on http://127.0.0.1:4231.

7import { createServer } from 'node:http'

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

server/index.jsView on unpkg · L5

8import { readFile, mkdir } from 'node:fs/promises'

9import { existsSync } from 'node:fs'

10import { join, dirname } from 'node:path'

11import { fileURLToPath } from 'node:url'

12import { createSessions } from './lib/sessions.js'

13import { createSettings } from './lib/settings.js'

14import { createCors, createAuth } from './lib/cors.js'

15import { runCodexTurn } from './lib/runner.js'

16import { geminiModels } from './lib/gemini-models.js'

17import { generateGeminiResponse, responseSse } from './lib/gemini-responses.js'

18import { ensureCodex } from './codex.js'

19

20const here = dirname(fileURLToPath(import.meta.url))

21

22async function readBody(req, limit = 1_000_000) {

23 const chunks = []

24 let size = 0

25 for await (const chunk of req) {

server/lib/gemini-models.jsView file

Lines 1-21javascript

1export async function geminiModels(apiKey) {

2 if (!apiKey) {

3 const error = new Error(

dist/styles.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/styles.cssView on unpkg

server/lib/runner.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @pmcai/codex-chat-widget@0.1.0 matchedIdentity = npm:[redacted]:0.1.0 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

server/lib/runner.jsView on unpkg