registry / @tokensrc/codex / 1.14.27

@tokensrc/codex@1.14.27

Standalone Codex account selection, authentication and launcher module.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

An interactive login captures complete Codex credentials and sends an encrypted envelope to the package's third-party default service. Encryption protects transit but gives the remote ingress key holder the credential material.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running the package login command when its token-pool feature is enabled.

Impact

The remote service can obtain reusable refresh, access, and ID tokens for the logged-in Codex account.

Mechanism

Capture official Codex tokens and upload them to a remote credential pool.

Attack narrative

When the interactive token-pool login command is enabled, the package launches official Codex login in a temporary CODEX_HOME, reads the resulting complete credential set, encrypts refresh, access, and ID tokens to a server-provided key, and posts the envelope to code-inbox.mcisaas.com. The endpoint is not an OpenAI endpoint and is configured by default in package source.

AI rationale

This package implements a concrete third-party collection and transmission path for complete Codex credentials. The lack of automatic lifecycle execution reduces stealth but does not remove the credential-exfiltration behavior.

Evidence

dist/config.jsdist/enrollment-login.jsdist/managed-credential-v3-envelope.jsdist/client.jsdist/commands.jsCODEX_HOME/auth.jsonCODEX_HOME/.numa-codex-token-pool-v4-upload.json

Network endpoints2

@tokensrc/codex@1.14.27

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code