registry / @trycodev/cli / 0.14.0
@trycodev/cli@0.14.0
Secure CoDev cloud coding-agent authentication CLI
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged credential flows are invoked by explicit commands that connect coding agents to the CoDev service, matching the package’s stated purpose. The automatic version check contacts the npm registry, and no install-time or unrelated collection behavior was found in the reviewed paths.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Explicit CLI commands such as login, provider-auth, setup, and enabled agent integrations; the version check can also run during member commands.
Impact
The reviewed behavior supports CoDev sign-in, agent integration, and chat sharing; no unrelated collection or execution was identified.
Mechanism
The CLI sends authentication data to the configured CoDev service for agent connection and checks npm for the latest package version.
AI rationale
The flagged credential flows are invoked by explicit commands that connect coding agents to the CoDev service, matching the package’s stated purpose. The automatic version check contacts the npm registry, and no install-time or unrelated collection behavior was found in the reviewed paths.
Evidence
~/.codev/config.json~/.codev/latest.json
Network endpoints2
www.trycodev.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines test and typecheck scripts but no install lifecycle hook.
- The client defaults to CoDev’s service; its authenticated requests use the saved CoDev login and configured API URL.
- The Codex auth flow reads credentials created in a temporary home and sends them to CoDev’s codex-auth endpoint.
- The entry point invokes provider-auth functions only for their explicitly named CLI commands.
- The update check fetches version information from the npm registry and stores the result locally.
Evidence against
- The explicit provider-auth commands transfer Codex, Claude, or Cursor credentials to CoDev as part of connecting those agents.
- The documented chat mirror sends prompts, replies, and tool output to CoDev when enabled. These are described as product features.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
12 flaggedsrc/update-check.mjsView file
1import { spawn } from "node:child_process";
L2: import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
High
Child Process
Package source references child process execution.
src/update-check.mjsView on unpkg · L1•matchType = previous_version_dangerous_delta
matchedPackage = @trycodev/cli@0.11.0
matchedIdentity = npm:QHRyeWNvZGV2L2NsaQ:0.11.0
similarity = 0.593
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/update-check.mjsView on unpkgsrc/share-files.mjsView file
1import { execFile } from "node:child_process";
L2: import { createHash } from "node:crypto";
...
L46: { maxBuffer: 64 << 20, encoding: "buffer" },
L47: (error, stdout) => resolve(error ? null : stdout),
L48: );
...
L57: if (!out) return null;
L58: return [...new Set(out.toString("utf8").split("\0").filter(Boolean))];
L59: }
Findings
1 Critical10 High3 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationsrc/client.mjs
HighChild Processsrc/update-check.mjs
HighSame File Env Network Executionsrc/client.mjs
HighKnown Malware Source Similaritysrc/client.mjs
HighKnown Malware Source Similaritysrc/coordinate-git.mjs
HighKnown Malware Source Similaritysrc/mirror-daemon.mjs
HighKnown Malware Source Similaritysrc/mirror.mjs
HighKnown Malware Source Similaritysrc/clone.mjs
HighKnown Malware Source Similaritysrc/coordinate.mjs
HighKnown Malware Source Similaritysrc/share-git.mjs
HighPrevious Version Dangerous Deltasrc/update-check.mjs
Affected versions and remediation
This report applies to @trycodev/cli@0.14.0.
See all versions of @trycodev/cli for other recorded verdicts.
- Review the evidence and your use of @trycodev/cli@0.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.