registry / @su-record/vibe / 3.2.4

@su-record/vibe

@3.2.4

AI Coding Framework for Claude Code — 7+ agents, 51 skills, multi-LLM orchestration

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Installation silently modifies broad, foreign AI-agent configuration surfaces. It installs agent/skill content and a Codex lifecycle notify program, affecting future sessions.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall

Impact

Alters Claude, Codex, and Cursor behavior without an explicit setup command.

Mechanism

Global AI-agent configuration injection and lifecycle hook registration

Policy narrative

On installation, the postinstall handler copies package-controlled agents and skills into global Claude, Codex, and Cursor directories, changes Claude settings, and registers a Node notify script in Codex config.toml. These changes happen without an explicit user setup command and influence future AI-agent sessions.

Rationale

The package has a concrete unconsented postinstall mutation chain targeting broad third-party AI-agent control surfaces. The absence of install-time networking does not mitigate that persistence/control-surface behavior.

Evidence

package.jsondist/cli/postinstall/main.jsdist/cli/postinstall/fs-utils.jsdist/cli/postinstall/global-config.jsdist/cli/setup/ProjectSetup.jsdist/cli/utils/cli-detector.js~/.vibe/~/.claude/agents/~/.claude/skills/~/.claude/CLAUDE.md~/.claude/settings.json

~/.codex/AGENTS.md

~/.codex/config.toml

~/.cursor/agents/

~/.cursor/skills/

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for policy block

package.json postinstall imports and runs main() automatically.
dist/cli/postinstall/main.js writes global Claude/Codex/Cursor assets during install.
dist/cli/setup/ProjectSetup.js injects ~/.codex/AGENTS.md and config.toml notify.
dist/cli/postinstall/global-config.js mutates ~/.claude/settings.json.
dist/cli/postinstall/fs-utils.js recursively copies and removes global skill directories.

Evidence against

No network request is made by the inspected postinstall path.
Some cleanup checks preserve non-vibe or user-modified skills.
Networked proxy/orchestration code is reachable through explicit runtime commands.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

17 flagged

package.jsonView file

Lines 15-55json

15 "./memory": {

16 "types": "./dist/infra/lib/memory/index.d.ts",

17 "default": "./dist/infra/lib/memory/index.js"

18 }

19 },

20 "bin": {

Source & flagged code

17 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "import('./dist/cli/postinstall/main.js').then(m=>m.main()).catch(()=>{})"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "import('./dist/cli/postinstall/main.js').then(m=>m.main()).catch(()=>{})"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/infra/lib/TaskContext.jsView file

26} L27: static fork(parentContext, forkOpts) { L28: const data = {

High

Child Process

Package source references child process execution.

dist/infra/lib/TaskContext.jsView on unpkg · L26

Findings

1 Critical10 High8 Medium6 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/infra/lib/TaskContext.js

HighShelldist/infra/lib/PythonParser.js

HighSame File Env Network Executiondist/infra/lib/codex-proxy.js

HighRuntime Package Installdist/cli/commands/telegram.js

HighKnown Malware Source Similaritydist/infra/lib/codex-proxy.js

HighKnown Malware Source Similarityhooks/scripts/llm-orchestrate.js

HighKnown Malware Source Similaritydist/cli/commands/init.js

HighKnown Malware Source Similaritydist/cli/commands/telegram.js

HighKnown Malware Source Similarity

LPM CLI

scanned 312 file(s), 1.96 MB of source, external domains: api.anthropic.com, api.example.com, api.figma.com, api.openai.com, api.slack.com, api.telegram.org, api.z.ai, auth.openai.com, chatgpt.com, console.anthropic.com, generativelanguage.googleapis.com, github.com, nodejs.org, platform.openai.com, raw.githubusercontent.com, registry.npmjs.org, rubygems.org, www.w3.org, z.ai

dist/infra/lib/PythonParser.jsView file

8import os from 'os'; L9: const execAsync = promisify(exec); L10: // Determine Python command based on platform

High

Shell

Package source references shell execution.

dist/infra/lib/PythonParser.jsView on unpkg · L8

dist/tools/convention/applyQualityRules.jsView file

21react: ['dangerouslySetInnerHTML', 'props drilling (3+ levels)'], L22: javascript: ['var usage', '== instead of ===', 'eval() usage'], L23: css: ['!important abuse', 'inline style abuse']

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/tools/convention/applyQualityRules.jsView on unpkg · L21

dist/infra/lib/MemoryManager.jsView file

33try { L34: const fs = require('fs'); L35: if (fs.existsSync(cwdClaudePath)) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/infra/lib/MemoryManager.jsView on unpkg · L33

dist/cli/commands/codex-proxy.jsView file

33console.log(` 인증: ${auth ? AUTH_LABELS[auth.source] || auth.source : '미설정'}`); L34: console.log(` Target: ${settings.targetUrl || 'https://api.openai.com'}`); L35: console.log(` 명령어: ${settings.alias || 'vibe codex'}\n`); ... L75: // 2. 환경변수 L76: if (process.env.OPENAI_API_KEY) { L77: return { provider: 'openai', label: 'OpenAI (OPENAI_API_KEY)', key: process.env.OPENAI_API_KEY }; ... L142: function readCodexModelsCache() { L143: const codexHome = process.env.CODEX_HOME || path.join(os.homedir(), '.codex'); L144: const cachePath = path.join(codexHome, 'models_cache.json'); L145: try { L146: const data = JSON.parse(fs.readFileSync(cachePath, 'utf-8')); L147: return (data.models || []).map(m => m.slug).filter(Boolean);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli/commands/codex-proxy.jsView on unpkg · L33

dist/infra/lib/codex-proxy.jsView file

912const settings = getProxySettings(); L913: const defaultModel = model || process.env.CODEX_PROXY_MODEL || resolveDefaultModel(settings.model); L914: const modelSlots = resolveModelSlots(defaultModel); ... L921: console.log(`Codex Proxy :${port} | ${authLabel} | opus=${modelSlots.opus} sonnet=${modelSlots.sonnet} haiku=${modelSlots.haiku}`); L922: const child = spawn('claude', ['--dangerously-sk[redacted]', ...claudeArgs], { L923: stdio: 'inherit', ... L925: ...process.env, L926: ANTHROPIC_BASE_URL: `http://localhost:${port}`, L927: ANTHROPIC_AUTH_TOKEN: 'codex-proxy',

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/infra/lib/codex-proxy.jsView on unpkg · L912

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = dist/infra/lib/codex-proxy.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/infra/lib/codex-proxy.jsView on unpkg

dist/cli/commands/telegram.jsView file

100try { L101: child_process.execSync('npm install playwright', { L102: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/telegram.jsView on unpkg · L100

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = dist/cli/commands/telegram.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/telegram.jsView on unpkg

vibe/setup.shView file

•path = vibe/setup.sh kind = build_helper sizeBytes = 837 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vibe/setup.shView on unpkg

hooks/scripts/llm-orchestrate.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = hooks/scripts/llm-orchestrate.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/llm-orchestrate.jsView on unpkg

dist/cli/commands/init.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = dist/cli/commands/init.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/init.jsView on unpkg

dist/cli/commands/update.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = dist/cli/commands/update.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/update.jsView on unpkg

skills/vibe.e2e-commerce/templates/test-scenarios.mdView file

16patternName = generic_password severity = medium line = 16 matchedText = user: { ..." },

Medium

Secret Pattern

Hardcoded password in skills/vibe.e2e-commerce/templates/test-scenarios.md

skills/vibe.e2e-commerce/templates/test-scenarios.mdView on unpkg · L16

vibe/rules/quality/testing-strategy.mdView file

121patternName = generic_password severity = medium line = 121 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in vibe/rules/quality/testing-strategy.md

vibe/rules/quality/testing-strategy.mdView on unpkg · L121

dist/cli/commands/update.js

MediumDynamic Requiredist/infra/lib/MemoryManager.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli/commands/codex-proxy.js

MediumShips Build Helpervibe/setup.sh

MediumStructural Risk Force Deep Review

MediumSecret Patternskills/vibe.e2e-commerce/templates/test-scenarios.md

MediumSecret Patternvibe/rules/quality/testing-strategy.md

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/tools/convention/applyQualityRules.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

main → dist/cli/index.jstypes → ./dist/cli/index.d.tsexports mapbin → vibe

Runtimenode >=18.0.0

Artifact6.16 MB · 1,530 files1 signature(s) · provenance

Install lifecyclepostinstallprepublishOnly

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

17 flagged

package.jsonView file

Lines 15-55json

15 "./memory": {

16 "types": "./dist/infra/lib/memory/index.d.ts",

17 "default": "./dist/infra/lib/memory/index.js"

18 }

19 },

20 "bin": {

21 "vibe": "dist/cli/index.js"

22 },

23 "scripts": {

24 "build": "tsc && chmod +x dist/cli/index.js",

25 "dev": "tsc --watch",

26 "gen:skill-docs": "npx tsx scripts/gen-skill-docs.ts",

27 "gen:skill-docs:check": "npx tsx scripts/gen-skill-docs.ts --check",

28 "sync:agent-models": "npx tsx scripts/sync-agent-models.ts",

29 "sync:agent-models:check": "npx tsx scripts/sync-agent-models.ts --check",

30 "validate:skill-invocation": "npx tsx scripts/validate-skill-invocation.ts",

31 "validate:counts": "npx tsx scripts/validate-counts.ts",

32 "test": "vitest run",

33 "test:watch": "vitest",

34 "prepublishOnly": "pnpm build",

35 "postinstall": "node -e \"import('./dist/cli/postinstall/main.js').then(m=>m.main()).catch(()=>{})\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L35

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L35

36 "release": "pnpm version patch && git push origin main --follow-tags"

37 },

38 "keywords": [

39 "ai",

40 "core",

41 "coding",

42 "spec-driven",

43 "claude",

44 "agent",

45 "requirements",

46 "user-story",

47 "ultrawork",

48 "parallel-agents",

49 "memory-management",

50 "knowledge-graph",

51 "code-analysis",

52 "code-quality",

53 "harness"

54 ],

55 "author": "Su",

dist/infra/lib/TaskContext.jsView file

Lines 6-46javascript

6// ============================================================================

7// TaskContext (static registry)

8// ============================================================================

9export class TaskContext {

10 static registry = new Map();

dist/infra/lib/PythonParser.jsView file

Lines 1-28javascript

1// Python code parser utility for v1.3

2// Uses Python's ast module via child_process

3import { exec } from 'child_process';

4import { promisify } from 'util';

5import { writeFile, unlink } from 'fs/promises';

6

dist/tools/convention/applyQualityRules.jsView file

Lines 1-41javascript

1// Convention management tool - completely independent

2// Code Quality Standards

3const QUALITY_RULES = {

4 NAMING: {

5 variables: 'nouns (userList, userData)',

6 functions: 'verb+noun (fetchData, updateUser)',

7 events: 'handle prefix (handleClick, handleSubmit)'

dist/infra/lib/MemoryManager.jsView file

Lines 13-53javascript

13 storage;

14 graph;

15 memorySearch;

16 observations;

17 sessionRAG;

18 ragRetriever;

19 reflections;

20 // Map of projectPath -> MemoryManager instance (for project-based memory)

21 static instances = new Map

dist/cli/commands/codex-proxy.jsView file

Lines 13-53javascript

13 'codex-cli': 'Codex CLI (ChatGPT Pro)',

14 'apikey': 'API Key',

15 'env': 'CODEX_PROXY_API_KEY',

16};

17// ─── 실행 ────────────────────────────────────────────────────

18export function

dist/infra/lib/codex-proxy.jsView file

Lines 892-932javascript

892 // Sonnet → codex 코딩 모델 (spark 제외, 정확도 우선)

893 const codexModel = models.find(m => m.includes('codex') && !m.includes('mini'

dist/cli/commands/telegram.jsView file

100try { L101: child_process.execSync('npm install playwright', { L102: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/telegram.jsView on unpkg · L100

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = dist/cli/commands/telegram.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/telegram.jsView on unpkg

vibe/setup.shView file

•path = vibe/setup.sh kind = build_helper sizeBytes = 837 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vibe/setup.shView on unpkg

hooks/scripts/llm-orchestrate.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = hooks/scripts/llm-orchestrate.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/llm-orchestrate.jsView on unpkg

dist/cli/commands/init.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = dist/cli/commands/init.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/init.jsView on unpkg

dist/cli/commands/update.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = dist/cli/commands/update.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/update.jsView on unpkg

skills/vibe.e2e-commerce/templates/test-scenarios.mdView file

16patternName = generic_password severity = medium line = 16 matchedText = user: { ..." },

Medium

Secret Pattern

Hardcoded password in skills/vibe.e2e-commerce/templates/test-scenarios.md

skills/vibe.e2e-commerce/templates/test-scenarios.mdView on unpkg · L16

vibe/rules/quality/testing-strategy.mdView file

121patternName = generic_password severity = medium line = 121 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in vibe/rules/quality/testing-strategy.md

vibe/rules/quality/testing-strategy.mdView on unpkg · L121

11 constructor() {

12 // Pure static class — no instantiation

13 }

14 static create(opts) {

15 const data = {

16 taskId: opts.taskId,

17 sessionId: opts.sessionId,

18 projectPath: opts.projectPath,

19 scope: opts.scope ?? 'task',

20 parentTaskId: null,

21 agentName: opts.agentName ?? null,

22 createdAt: new Date().toISOString(),

23 };

24 TaskContext.registry.set(opts.taskId, data);

25 return data;

26 }

27 static fork(parentContext, forkOpts) {

28 const data = {

High

Child Process

Package source references child process execution.

dist/infra/lib/TaskContext.jsView on unpkg · L26

29 taskId: forkOpts.taskId,

30 sessionId: parentContext.sessionId,

31 projectPath: parentContext.projectPath,

32 scope: forkOpts.scope ?? parentContext.scope,

33 parentTaskId: parentContext.taskId,

34 agentName: forkOpts.agentName ?? null,

35 createdAt: new Date().toISOString(),

36 };

37 TaskContext.registry.set(forkOpts.taskId, data);

38 return data;

39 }

40 static getScoped(taskId) {

41 return TaskContext.registry.get(taskId) ?? null;

42 }

43 static cleanup(taskId) {

44 const children = TaskContext.getChildren(taskId);

45 for (const child of children) {

46 TaskContext.cleanup(child.taskId);

import { existsSync, unlinkSync } from 'fs';

7import path from 'path';

8import os from 'os';

9const execAsync = promisify(exec);

10// Determine Python command based on platform

High

Shell

Package source references shell execution.

dist/infra/lib/PythonParser.jsView on unpkg · L8

11function getPythonCommand() {

12 if (process.platform === 'win32') {

13 // Try common Windows Python locations

14 const pythonPaths = [

15 `${process.env.LOCALAPPDATA}\\Programs\\Python\\Python312\\python.exe`,

16 `${process.env.LOCALAPPDATA}\\Programs\\Python\\Python311\\python.exe`,

17 `${process.env.LOCALAPPDATA}\\Programs\\Python\\Python310\\python.exe`,

18 'py', // Python Launcher

19 'python'

20 ];

21 for (const pythonPath of pythonPaths) {

22 try {

23 if (pythonPath.includes('\\') && existsSync(pythonPath)) {

24 return `"${pythonPath}"`;

25 }

26 }

27 catch { /* ignore: optional operation */

28 continue;

,

8 booleans: 'is/has/can prefix (isLoading, hasError, canEdit)',

9 constants: 'UPPER_SNAKE_CASE (MAX_RETRY_COUNT, API_TIMEOUT)',

10 components: 'PascalCase (UserProfile, HeaderSection)',

11 hooks: 'use prefix (useUserData, useAuth)'

12 },

13 STRUCTURE: {

14 componentOrder: ['State & Refs', 'Custom Hooks', 'Event Handlers', 'Effects', 'Early returns', 'Main return JSX'],

15 functionMaxLines: 20,

16 componentMaxLines: 50,

17 maxNestingDepth: 3

18 },

19 ANTIPATTERNS: {

20 typescript: ['any type usage', '@ts-ignore usage', 'as any casting'],

21 react: ['dangerouslySetInnerHTML', 'props drilling (3+ levels)'],

22 javascript: ['var usage', '== instead of ===', 'eval() usage'],

23 css: ['!important abuse', 'inline style abuse']

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/tools/convention/applyQualityRules.jsView on unpkg · L21

24 },

25 ASYNC_STATES: ['data', 'isLoading', 'error'],

26 STATE_MANAGEMENT: {

27 simple: 'useState',

28 complex: 'useReducer',

29 globalUI: 'Context API',

30 globalApp: 'Zustand',

31 server: 'TanStack Query'

32 }

33};

34export const applyQualityRulesDefinition = {

35 name: 'apply_quality_rules',

36 description: 'apply rules|apply standards|follow conventions - Apply quality rules',

37 inputSchema: {

38 type: 'object',

39 properties: {

40 scope: { type: 'string', description: 'Application scope', enum: ['naming', 'structure', 'typescript', 'react', 'accessibility', 'all'] },

41 language: { type: 'string', description: 'Programming language context', enum: ['javascript', 'typescript', 'react', 'vue', 'general'] }

();

22 static instance = null;

23 static cleanupRegistered = false;

24 constructor(projectPath) {

25 // Determine project path

26 let resolvedPath = projectPath;

27 if (!resolvedPath && process.env.CLAUDE_PROJECT_DIR) {

28 resolvedPath = process.env.CLAUDE_PROJECT_DIR;

29 }

30 if (!resolvedPath) {

31 // Only use cwd if it looks like a real project (has .claude folder)

32 const cwdClaudePath = path.join(process.cwd(), '.claude');

33 try {

34 const fs = require('fs');

35 if (fs.existsSync(cwdClaudePath)) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/infra/lib/MemoryManager.jsView on unpkg · L33

36 resolvedPath = process.cwd();

37 }

38 }

39 catch {

40 // Ignore errors

41 }

42 }

43 if (!resolvedPath) {

44 throw new Error('No valid project path found. Provide projectPath or set CLAUDE_PROJECT_DIR environment variable.');

45 }

46 // Normalize path

47 resolvedPath = path.resolve(resolvedPath);

48 // Skip memory creation for core package itself

49 if (this.isCorePackage(resolvedPath)) {

50 throw new Error('Memory storage disabled for core package development folder.');

51 }

52 // Initialize modules

53 this.storage = new MemoryStorage(resolvedPath);

codexLaunch

(

model

,

claudeArgs

) {

19 launchSession(model, claudeArgs);

20}

21// ─── 셸 함수 출력 ───────────────────────────────────────────

22export function codexShell(modelArg) {

23 const settings = getProxySettings();

24 const model = modelArg || settings.model;

25 console.log(generateShellFunction(model));

26}

27// ─── 상태 확인 ───────────────────────────────────────────────

28export function codexStatus() {

29 const auth = checkAuthSource();

30 const settings = getProxySettings();

31 console.log(`\n Provider: ${settings.provider || '미설정'}`);

32 console.log(` 모델: ${settings.model || '(기본값)'}`);

33 console.log(` 인증: ${auth ? AUTH_LABELS[auth.source] || auth.source : '미설정'}`);

34 console.log(` Target: ${settings.targetUrl || 'https://api.openai.com'}`);

35 console.log(` 명령어: ${settings.alias || 'vibe codex'}\n`);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli/commands/codex-proxy.jsView on unpkg · L33

36}

37// ─── Setup ──────────────────────────────────────────────────

38export async function codexSetup() {

39 p.intro('Codex Proxy 설정');

40 // 1. 인증 자동 감지

41 const detected = detectAuth();

42 if (detected) {

43 p.log.success(`${detected.label} 인증 확인됨`);

44 // 2. 모델 자동 조회

45 const models = detected.provider === 'chatgpt-pro'

46 ? readCodexModelsCache()

47 : detected.key ? await fetchModels(detected.url || 'https://api.openai.com', detected.key) : [];

48 const model = await selectModel(models);

49 const alias = await selectAlias();

50 saveConfig(detected.provider, { key: detected.key, url: detected.url }, model, alias);

51 await registerShell(alias);

52 p.outro(`설정 완료! ${alias} 로 실행하세요`);

53 }

)

&&

!

m.

includes

(

'spark'

)

&&

m

!==

defaultModel)

894 || models.find(m => m.includes('codex') && !m.includes('mini') && !m.includes('spark'))

895 || defaultModel;

896 // Haiku → codex-spark (고속), 없으면 mini

897 const miniModel = models.find(m => m.includes('codex-spark'))

898 || models.find(m => m.includes('mini'))

899 || defaultModel;

900 return { opus, sonnet: codexModel, haiku: miniModel };

901}

902// ─── 세션 실행 (프록시 + Claude Code 원샷) ──────────────────

903export function launchSession(model, claudeArgs = []) {

904 const authSource = checkAuthSource();

905 if (!authSource) {

906 console.error('인증 정보 없음.');

907 console.error(' ChatGPT Pro: npm i -g @openai/codex && codex login');

908 console.error(' Antigravity: ANTIGRAVITY_API_KEY 또는 CODEX_PROXY_API_KEY 설정');

909 console.error(' OpenAI: vibe gpt key <key> 또는 OPENAI_API_KEY 설정');

910 process.exit(1);

911 }

912 const settings = getProxySettings();

913 const defaultModel = model || process.env.CODEX_PROXY_MODEL || resolveDefaultModel(settings.model);

914 const modelSlots = resolveModelSlots(defaultModel);

915 const config = { port: 0, defaultModel };

916 const server = createProxyServer(config);

917 server.listen(0, '127.0.0.1', () => {

918 const addr = server.address();

919 const port = addr.port;

920 const authLabel = AUTH_SOURCE_LABELS[authSource.source];

921 console.log(`Codex Proxy :${port} | ${authLabel} | opus=${modelSlots.opus} sonnet=${modelSlots.sonnet} haiku=${modelSlots.haiku}`);

922 const child = spawn('claude', ['--dangerously-skip-permissions', ...claudeArgs], {

923 stdio: 'inherit',

924 env: {

925 ...process.env,

926 ANTHROPIC_BASE_URL: `http://localhost:${port}`,

927 ANTHROPIC_AUTH_TOKEN: 'codex-proxy',

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/infra/lib/codex-proxy.jsView on unpkg · L912

928 ANTHROPIC_API_KEY: 'codex-proxy',

929 API_TIMEOUT_MS: '3000000',

930 ANTHROPIC_DEFAULT_OPUS_MODEL: modelSlots.opus,

931 ANTHROPIC_DEFAULT_SONNET_MODEL: modelSlots.sonnet,

932 ANTHROPIC_DEFAULT_HAIKU_MODEL: modelSlots.haiku,

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.3 matchedPath = dist/infra/lib/codex-proxy.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/infra/lib/codex-proxy.jsView on unpkg