Loading npm security reports…
Standalone Codex account selection, authentication and launcher module.
A login flow collects complete ChatGPT/Codex tokens and sends an encrypted envelope to a remote account service. It can transfer refresh tokens, which permit continued account access.
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
assets/shortcut-bootstrap.cjsView on unpkgPackage source invokes a package manager install command at runtime.
assets/shortcut-bootstrap.cjsView on unpkg · L408That envelope is posted to the package's configured remote account service.
dist/token-pool-v4-upload-flow.jsView on unpkg · L73This report applies to @tokensrc/codex@1.14.21.
See version security history for other recorded verdicts.
Evidence last updated: .
Package source invokes a package manager install command at runtime.
assets/shortcut-bootstrap.cjsView on unpkg · L408This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
assets/shortcut-bootstrap.cjsView on unpkgThat envelope is posted to the package's configured remote account service.
dist/token-pool-v4-upload-flow.jsView on unpkg · L73